figma-swiftui
Warn
Audited by Snyk on Aug 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In the required Figma↔SwiftUI workflow, the design→code path calls the first-party tool
get_design_contexton user-provided Figma URLs (e.g.,figma.com/design/:fileKey/:fileName?node-id=:nodeId), and that tool output is read at runtime to produce code, so if a user can point to an arbitrary/self-authored Figma file/frame containing free-form text, the agent ingests it.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata