The Agent Skills Directory

[COMMAND_EXECUTION]: The skill interacts with the CUPS printing system using subprocess.run with list-based arguments for commands like lp, lpstat, and lpoptions. This implementation avoids shell execution and is resistant to shell injection attacks.
[COMMAND_EXECUTION]: User-controlled printer names are validated against a strict regex whitelist (^[\w.\-]+$) in the _validate_printer_name function, preventing command injection through crafted printer destination names.
[EXTERNAL_DOWNLOADS]: The skill depends on the official Pillow library for image processing, which is a well-known and trusted package.
[SAFE]: The _validate_file_path function implements a secure file access policy. It resolves symlinks to their absolute paths and verifies they reside within designated safe roots (the workspace or /tmp), effectively preventing the agent from being tricked into reading sensitive files like SSH keys or environment variables via symbolic links.

printer