figma-image-downloader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). This skill fetches and parses arbitrary user-provided Figma files via the Figma API (see the script's calls to https://api.figma.com/v1/files/{fileKey} and https://api.figma.com/v1/images/{fileKey}), ingesting untrusted, user-generated file structure and frame names as part of its runtime workflow which directly determines which frames/images are downloaded and thus can influence subsequent agent actions.