figma-implement-motion

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider-authored free text is ingested via the runtime MCP tool outputs get_design_context / get_motion_context (which are derived from the user-provided Figma file and include natural-language fields like motionSummary and potentially other text), and the required workflow explicitly merges that tool response into the agent’s LLM context.