pp-bambu

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the bambu-pp-cli binary and an MCP server from the author's official repositories (@mvanhorn/printing-press-library on NPM and github.com/mvanhorn/printing-press-library on GitHub). These are vendor-owned resources essential for the skill's operation.
  • [COMMAND_EXECUTION]: The skill is designed to interact with the host system by executing a specialized binary to fetch local printer data via MQTT and FTPS. It includes verification steps to ensure the binary is correctly installed and accessible.
  • [DATA_EXFILTRATION]: The skill exposes a --deliver webhook:<url> feature, which allows printer status, metadata, and history to be sent to an external URL. This is a documented feature intended for automation workflows, such as Discord notifications.
  • [DYNAMIC_EXECUTION]: The 'Automatic learning' system utilizes JSON 'playbooks' and locally journaled history to optimize command execution sequences. This involves dynamic assembly of CLI commands with slot substitution based on prior successful interactions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 08:16 AM
Security Audit — agent-trust-hub — pp-bambu