playwright-figma-scrape

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text can enter the LLM context via browser_navigate/browser_snapshot/browser_evaluate reading Figma page DOM (e.g., Properties panel innerText and Layers panel row text), which includes user-authored design content from the Figma file that the operating user did not author.