I can’t find this anywhere. I also can’t imagine this is a security risk.
If someone runs XYZ plugin on a specific file, they have access to 99.999999% of the rest of the file… the one thing that seems to be missing is some sort of unique ID for the DocumentNode itself.
My use case is I’m trying to make a public-facing plugin where users can configure settings per-file. I was going to do something like:
figma.clientStorage.setAsync(documentUID, settingsForThisFile)