figma-version-history

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text is ingested from Figma’s REST API responses (e.g., version label/description and user handles, plus node name/description fields) which are authored by other parties than the operating user; the script fetches these at runtime via curl/fetch and then includes them in the LLM-visible JSON output context.