figma-playwright-fallback

Warn

Audited by Snyk on Jun 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). 运行时会通过 Playwright 读取 Figma 网页的右侧 Properties 面板/导出面板等 DOM 文本与导出的 SVG(如 snippets/extract-properties.js、snippets/export-svg-via-panel.js 在 browser_evaluate 中把页面可读文本/Blob SVG 内容注入到 LLM 上下文),该内容属于 Figma 站点页面渲染结果而非操作用户自有文本。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 19, 2026, 07:28 PM
Issues
1
Security Audit — snyk — figma-playwright-fallback