figma-code-connect-components

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill's "How to use" explicitly directs the agent to open and install the upstream bundle from a public GitHub repository (https://github.com/figma/skills), requiring the agent to fetch and run untrusted third-party content that could contain instructions influencing its actions.