jlink
Warn
Audited by Snyk on Jul 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). RTT/SWO 子命令会把目标设备输出的“外部自由文本”读入并直接写入 LLM 上下文:
scripts/jlink_rtt.py通过start_stream_reader(rtt_proc.stdout)逐行读取 RTT 数据并调用emit_stream_record(..., text=line, as_json=...);scripts/jlink_swo.py同理读取viewer_cmd的 stdout 并emit_stream_record(..., text=line, ...),这些文本由非操作用户(目标固件/设备端或外部 viewer 输出)产生。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata