create-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly ingests user-provided Figma files/URLs (Step 4, Step 4b and the MCP calls like figma_get_file_data / figma_execute) and programmatically reads component content from those potentially public, user-generated Figma documents, which the agent then interprets to drive subsequent actions and tool usage.