kicad-schematic

Warn

Audited by Snyk on Nov 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The required workflow reads symbol libraries (.kicad_sym files named in the project or global sym-lib-table, or KiCad's stock folder) and copies their text fields, such as Description and Datasheet, into the schematic, so a community-published library could carry outsider-authored text, but the agent only reaches it after the user or agent selects a symbol.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 15, 2026, 04:00 AM
Issues
1