📦

bambu-labs

Name: bambu-labs
Author: earthtojake

مراجعة المحتوى r1 مخاطر عالية 🌐 الوصول إلى الشبكة⚙️ الأوامر الخارجية📁 الوصول إلى نظام الملفات🔑 متغيرات البيئة

Manage Bambu Lab LAN Print Jobs Safely

Local Bambu print handoffs require careful file validation, device setup, and physical safeguards. This skill plans, uploads, starts, pauses, and cancels jobs through local FTPS and MQTT.

يدعم: Claude Codex Code(CC)

⚠️ 38 ضعيف

توقف واطلب التأكيد قبل التثبيت.

راجع الخطة واحصل على موافقة صريحة من المستخدم قبل تغيير الملفات.

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل

Review the Skillstore skill "bambu-labs" from https://skillstore.io/skills/earthtojake-bambu-labs.md and its manifest at https://skillstore.io/api/skills/earthtojake-bambu-labs/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/earthtojake-bambu-labs.md manifest موقَّع GET /api/skills/earthtojake-bambu-labs/manifest lockfile موقَّع GET /api/skills/earthtojake-bambu-labs/lockfile

اختبرها

جارٍ استخدام "bambu-labs". Check whether my configured A1 Mini is ready for a local print.

النتيجة المتوقعة:

The printer responded and is idle. Storage is available, no active HMS issue was reported, and no file was uploaded.

جارٍ استخدام "bambu-labs". Prepare an upload plan for my validated enclosure G-code.

النتيجة المتوقعة:

Dry-run complete. The plan identifies the local file, remote project name, FTPS destination, MQTT topic, and required start confirmation.

جارٍ استخدام "bambu-labs". Pause the active print and confirm the result.

النتيجة المتوقعة:

The pause request was published to the configured printer. A follow-up status report indicates the job is paused.

التدقيق الأمني

مخاطر عالية

v1 • ٨‏/٩‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

The static results are false positives caused by Markdown syntax, documented private-network examples, and constrained local file or command handling. Two high-severity design risks remain: TLS peer verification is disabled by default, and printer access codes are written to plaintext configuration without restrictive permissions. No prompt injection, obfuscation, or malicious data-exfiltration intent was found.

الملفات التي تم فحصها

2,342

الأسطر التي تم تحليلها

عناصر المراجعة

تم تجاهل الإيجابيات الكاذبة

مخاوف أمنية مؤكدة (2)

مرتفع

scripts/bambu_lan_print.py:377-385 scripts/bambu_lan_print.py:944-951 scripts/bambu_lan_print.py:1155-1183 scripts/bambu_lan_print.py:1216-1229

Printer TLS Authentication Disabled by Default

FTPS, MQTT, and serial-discovery connections disable certificate verification unless users opt in. A local network attacker could impersonate the printer, capture its access code, or alter control traffic.

The code explicitly sets CERT_NONE and disables hostname checks before authenticating with the printer access code. This behavior occurs on every main TLS workflow by default.

مرتفع

scripts/bambu_lan_print.py:177-179 scripts/bambu_lan_print.py:1318-1322

Printer Access Code Stored Without Restricted Permissions

The configuration writer stores the printer access code as plaintext using default file permissions. Other local users or accidental repository inclusion could expose a credential that permits printer control.

The access code is assigned directly into the JSON object and write_text creates the file under the process umask. No chmod, secure secret store, or enforced ignore rule protects it.

عوامل الخطر

🌐 الوصول إلى الشبكة (11)

references/local-lan-protocol.md:64 references/local-lan-protocol.md:112 references/new-printer-onboarding.md:107 references/real-printer-checklist.md:27 scripts/bambu_lan_print.py:726 scripts/bambu_lan_print.py:793 SKILL.md:8 SKILL.md:49 SKILL.md:61 SKILL.md:95 SKILL.md:200

⚙️ الأوامر الخارجية (50)

📁 الوصول إلى نظام الملفات (13)

scripts/bambu_lan_print.py:24 scripts/bambu_lan_print.py:356 scripts/bambu_lan_print.py:727 scripts/bambu_lan_print.py:794 scripts/bambu_lan_print.py:1488 scripts/bambu_lan_print.py:1495 scripts/bambu_lan_print.py:26 scripts/bambu_lan_print.py:256 scripts/bambu_lan_print.py:257 scripts/bambu_lan_print.py:638 scripts/bambu_lan_print.py:639 SKILL.md:100 SKILL.md:112

🔑 متغيرات البيئة (2)

scripts/bambu_lan_print.py:41 scripts/bambu_lan_print.py:536

دقّقه: codex

شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار

نسخ رابط التقرير

https://skillstore.io/skills/earthtojake-bambu-labs/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/earthtojake-bambu-labs/security.svg)](https://skillstore.io/skills/earthtojake-bambu-labs?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/earthtojake-bambu-labs?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/earthtojake-bambu-labs/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/earthtojake-bambu-labs.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

earthtojake. (2026). bambu-labs security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/earthtojake-bambu-labs/audits/1

اقتباس BibTeX

@techreport{earthtojake-earthtojake-bambu-labs-2026,
  author = {earthtojake},
  title = {bambu-labs security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/earthtojake-bambu-labs/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "bambu-labs security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "earthtojake"
date-released: "2026-09-08"
url: "https://skillstore.io/skills/earthtojake-bambu-labs/audits/1"
identifiers:
  - type: other
    value: "skillstore:earthtojake-bambu-labs:audit:1"
    description: "Skillstore immutable audit report identifier"

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: متوسط

الهندسة المعمارية

قابلية الصيانة

المحتوى

المجتمع

الامتثال للمواصفات

ما الذي يمكنك بناؤه

Prepare a First LAN Handoff

Configure one printer, verify status, and review a dry-run upload plan without starting a print.

Upload a Validated Workshop Job

Inspect and upload approved G-code to a known printer before a supervised start.

Diagnose Local Print Control

Collect MQTT status, inspect acknowledgements, and compare supported handoff modes during integration testing.

جرّب هذه الموجّهات

Check Printer Setup

Help me configure my [printer model] for local LAN use. Stop after status verification and do not upload or start a print.

Review a Dry-Run Plan

Inspect [G-code path] for printer [printer id] and show the safest dry-run handoff plan. Do not execute network actions.

Upload Without Starting

Upload [G-code path] to [printer id] using [handoff mode]. Verify printer status first, execute upload only, and report the result.

Run a Supervised Project Handoff

For [printer id], validate [G-code path], inspect status, package with [template or bambox profile], upload, and start only when every safety check passes.

أفضل الممارسات

Use a trusted local network and verify the configured printer identity before live actions.
Review dry-run output, upload first, then start only with a clear user request and physical supervision.
Keep access codes outside version control and restrict credential-file permissions to the current user.

تجنب

Do not start a print from unvalidated G-code or an incompatible project template.
Do not bypass private-host checks or disable safeguards to reach an internet-hosted endpoint.
Do not treat an MQTT publish acknowledgement as proof that printing started safely.