jlink

Warn

Audited by Snyk on Jul 6, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). RTT/SWO 子命令会把目标设备输出的“外部自由文本”读入并直接写入 LLM 上下文:scripts/jlink_rtt.py 通过 start_stream_reader(rtt_proc.stdout) 逐行读取 RTT 数据并调用 emit_stream_record(..., text=line, as_json=...);scripts/jlink_swo.py 同理读取 viewer_cmd 的 stdout 并 emit_stream_record(..., text=line, ...),这些文本由非操作用户(目标固件/设备端或外部 viewer 输出)产生。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 6, 2026, 02:38 AM
Issues
1