figma-rest-api-scrape

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). REST API calls in the workflow fetch Figma file content (e.g., /v1/files/.../nodes and /v1/images/...), which is outsider-authored design text/metadata from a Figma file the operating user did not author; this readable JSON/text is then ingested into the agent context via the skill’s runtime curl | jq outputs.