serial
Warn
Audited by Snyk on Jul 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). 在
monitor/hex/log运行时,LLM上下文会接收来自“真实串口/串口多路复用”的外部设备字节流并在脚本中解码为可读文本(serial_monitor.py的raw.decode(...)、serial_hex.py的ascii_str/hex 输出、serial_log.py的raw.decode(...)),该文本并非由操作用户选择引入的内容,因此属于“外部来源的自由文本/数据”经运行时路径进入输出。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata