technical-tools

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's Design APIs section explicitly describes fetching and acting on user-generated Figma content via the Figma REST API (e.g., GET /files/{file_key}, images, variables, components) and Figma webhooks, meaning the agent ingests third‑party design files/token data that can directly drive pipelines and follow-up actions.