figma-generate-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow ingests outsider-authored free text when it calls search_design_system (and/or inspects an “Existing Screen”) to read design system component properties, variables, and style names/keys from the target Figma file, which are user-controlled content if the workflow target is not trusted.