skills/processmission/oh-my-qemu/qemu-boot-run/Snyk

qemu-boot-run

Warn

Audited by Snyk on Jul 31, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). In scripts/run-and-classify.py the runner repeatedly ingests free text from a user-influenced, file-backed QEMU serial console log (args.log) by reading raw bytes and matching provided success/failure markers against that log content.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 31, 2026, 01:32 AM

Issues

1

Security Audit — snyk — qemu-boot-run