build-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow fetches a user-selected Figma link through the Figma MCP (get_design_context, get_metadata, get_variable_defs), and that file's layer names and text can be authored by anyone with edit or community access, so the agent ingests outsider text only after the user picks the file, which makes this a low-exposure path.