bambu-labs
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/bambu_lan_print.pyscript invokes thebamboxCLI tool usingsubprocess.run()to package and validate 3D printing projects. The tool path is configurable via theBAMBOX_BINenvironment variable or command-line arguments, intended to point to a locally installed utility. - [SAFE]: Local printer credentials, specifically access codes, are stored in a workspace-local JSON file (
bambu-printers.json). The skill instructions explicitly guide the user to treat this as a local-only configuration and to exclude it from version control to prevent credential exposure. - [SAFE]: The script implements a
validate_local_hostcheck that restricts network operations (FTPS and MQTT) to private, loopback, or link-local IP addresses by default. This mechanism prevents the agent from connecting to external or public-facing servers without explicit user override via--allow-nonprivate-host. - [SAFE]: All printer communication is conducted over encrypted channels, utilizing implicit TLS for FTPS (port 990) and TLS for MQTT (port 8883), ensuring that control commands and status updates are protected from interception on the local network.
Audit Metadata