openocd

Warn

Audited by Snyk on Jul 6, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.75). 运行时会把“Telnet/ITM/Semihosting 等由 OpenOCD 产生的输出文本”作为可读字符串写入 LLM 上下文:例如 openocd_telnet.py 的 execute_action() 将 telnet.send(...) 返回的响应(外部系统回传的自由文本)放入 result.details 并最终 output_json()/print_result() 回显;同理 openocd_semihosting.py 通过 emit_stream_record(text=line, ...) 把 OpenOCD stderr 的行文本持续输出为 JSON/文本。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 6, 2026, 02:39 AM
Issues
1