figma-to-unity

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow calls get_design_context(fileKey, nodeId) and get_screenshot(fileKey, nodeId) from the Figma MCP server using a user-supplied Figma URL; the MCP response is outsider-authored design content (public/third-party Figma document text/layout) that is then ingested into the agent’s LLM context to drive translation into UXML/USS.