bambu-labs

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/bambu_lan_print.py script invokes the bambox CLI tool using subprocess.run() to package and validate 3D printing projects. The tool path is configurable via the BAMBOX_BIN environment variable or command-line arguments, intended to point to a locally installed utility.
  • [SAFE]: Local printer credentials, specifically access codes, are stored in a workspace-local JSON file (bambu-printers.json). The skill instructions explicitly guide the user to treat this as a local-only configuration and to exclude it from version control to prevent credential exposure.
  • [SAFE]: The script implements a validate_local_host check that restricts network operations (FTPS and MQTT) to private, loopback, or link-local IP addresses by default. This mechanism prevents the agent from connecting to external or public-facing servers without explicit user override via --allow-nonprivate-host.
  • [SAFE]: All printer communication is conducted over encrypted channels, utilizing implicit TLS for FTPS (port 990) and TLS for MQTT (port 8883), ensuring that control commands and status updates are protected from interception on the local network.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 01:06 PM
Security Audit — agent-trust-hub — bambu-labs