pp-bambu

Pass

Audited by Gen Agent Trust Hub on Jul 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the bambu-pp-cli tool via npx from the @mvanhorn NPM namespace and via go install from the github.com/mvanhorn GitHub repository.
  • [COMMAND_EXECUTION]: The skill is designed around the agent executing various bash commands and subcommands of the bambu-pp-cli binary to retrieve printer status, manage history, and perform analytics.
  • [REMOTE_CODE_EXECUTION]: The installation process involves downloading and executing code from external registries (NPM and GitHub) to provide the necessary CLI environment.
  • [DATA_EXFILTRATION]: The CLI tool contains a built-in feature to route its output to remote webhooks using the --deliver webhook:<url> flag and includes a feedback command (bambu-pp-cli feedback) that can send data to a configured endpoint.
  • [DYNAMIC_EXECUTION]: The skill implements an 'Automatic Learning' system where the agent retrieves and executes command sequences ('playbooks') from a local SQLite database based on previous interactions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 19, 2026, 11:58 PM
Security Audit — agent-trust-hub — pp-bambu