qt-figma-component-generation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime path calls the Figma MCP tool get_design_context for each individual component node, and that MCP response is outsider-authored free-form text/JSON originating from the Figma file (a third-party design source) that is then ingested into the agent’s LLM context for mapping/code generation.