openocd
Warn
Audited by Snyk on Jul 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). 运行时会把“Telnet/ITM/Semihosting 等由 OpenOCD 产生的输出文本”作为可读字符串写入 LLM 上下文:例如
openocd_telnet.py的execute_action()将telnet.send(...)返回的响应(外部系统回传的自由文本)放入result.details并最终output_json()/print_result()回显;同理openocd_semihosting.py通过emit_stream_record(text=line, ...)把 OpenOCD stderr 的行文本持续输出为 JSON/文本。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata