sfnext-create-figma-kit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The workflow ingests outsider-authored free text via the “Source kit” step: it duplicates and then operates on a public Figma community file fetched at runtime (Figma MCP reads the community kit’s node text/metadata into the agent context during automation), which is not authored by the operating user.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill requires runtime use of external Figma endpoints (e.g., the community file https://www.figma.com/community/file/1646023293012114166 and Figma file URLs like figma.com/design/<FILE_KEY>?node-id=...) and the configured Figma MCP/Code Connect integration (invoked via assisted MCP automation and npx figma connect publish), which will execute remote actions based on agent instructions, so this is a runtime external dependency that can perform code-like operations.