create-voice

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and executes extraction and rendering scripts against user-supplied Figma files (Step 4: "From MCP tools (when Figma link provided): figma_get_file_data, figma_get_component_for_development" and the long extraction/figma_execute scripts), so it ingests untrusted, user-generated third-party content and uses that content to drive variant selection, slot insertions, and rendering decisions.