figma-arrange-component-set

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill’s runtime reads outsider-authored free text from variant node names inside a COMPONENT_SET (i.e., variant.name parsed by parseVariantName and then used to create label/title text), and those variant names are not authored by the skill itself.