bambu-labs

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to accept and write printer "access code" secrets from the user and shows examples embedding those codes verbatim in CLI commands and JSON, forcing the LLM to handle/output secret values directly.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, the workflow reads outsider-authored free text from the printer’s MQTT report/response payloads by decoding and (optionally) JSON-parsing report_payload/payload in read_mqtt_reports_until() and subscribe_mqtt_reports(), where that text originates from the networked printer endpoint.