bambu-labs Audit report.

Warnings

• Permission surface may require sandboxing
• TLS verification is disabled by default, which could be a security risk if used on untrusted networks; the skill should document this and make it configurable.
• The skill is validated primarily on A1 Mini; other printer models may have untested behaviors or require different handoff modes.
• The skill assumes a validated plain .gcode file and does not perform G-code validation itself, which could lead to unsafe prints if the upstream validation is insufficient.
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.