figma-swiftui

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime path is get_design_context for Figma design content; that tool ingests Figma-authored text (e.g., frame labels, SF Symbol names, and Code Connect snippets) which are outsider-authored relative to the operating user, and the resulting readable prose/code is placed into the agent’s LLM context.