ylf-figma

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill reads Figma design files and assets via MCP tools (get_design_context, get_screenshot, etc.), which ingest user-authored design text and labels from Figma; however, Figma is considered a collaborative/community design tool rather than a monitored outsider communication channel (like a support inbox or public feed), making it a low-risk user-fetched source under the scoring rules.