Skills meituan-printer

📦

meituan-printer

Name: meituan-printer
Author: chenyangshu

Content revision r3 High Risk 🌐 Network access⚙️ External commands

Print and Schedule Meituan Thermal Jobs

Store teams need a reliable way to format and route thermal print jobs. This skill documents printer setup, connectivity checks, immediate printing, and scheduled jobs.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "meituan-printer" from https://skillstore.io/skills/chenyangshu-meituan-printer.md and its manifest at https://skillstore.io/api/skills/chenyangshu-meituan-printer/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/chenyangshu-meituan-printer.md Signed manifest GET /api/skills/chenyangshu-meituan-printer/manifest Signed lockfile GET /api/skills/chenyangshu-meituan-printer/lockfile

Test it

Using "meituan-printer". Prepare an immediate test slip for the kitchen printer.

Expected outcome:

Target: Kitchen printer alias
Title: Printer Test
Body preview: Check connection, paper, and cutter.
Status: Awaiting confirmation; no print was sent.

Using "meituan-printer". Help me add a front counter printer.

Expected outcome:

Please provide the printer LAN address.
The default port is 9100 unless your device uses another port.
I will show the proposed alias and settings before changing configuration.

Using "meituan-printer". Plan a closing checklist every Friday at 22:00.

Expected outcome:

Schedule: Every Friday at 22:00
Target: Confirm the printer alias before setup.
Persistence: The system task remains active after the web process closes.
Status: Awaiting approval before creating a scheduled task.

Security Audit

High Risk

v8 • 7/23/2026 Open versioned report

Most hardcoded addresses, Markdown backticks, and entropy alerts are false positives from examples and readable documentation. However, the skill directs command execution and persistent scheduling, and it promotes unpinned software installation. The audited bundle omits every referenced script, preventing verification of runtime safeguards.

Files scanned

647

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (9)

High

README.md:258

macOS launch agent/daemon

| macOS | 写入 `~/Library/LaunchAgents/com.meituan-printer.<task-id>.plist` 并通过 `launchctl load` 加载 |

The documentation explicitly writes and loads a launchd agent that survives the web process. This is a genuine persistent operating-system change.

High

README.md:259

Windows scheduled task creation

| Windows | 使用 `schtasks /create` 创建 `MeituanPrinter-<task-id>` 任务 |

The documentation explicitly creates a Windows scheduled task that persists outside the web process. This is a genuine persistent operating-system change.

High

SKILL.md:235

macOS launch agent/daemon

- **macOS**:导出为 launchd plist,安装到 `~/Library/LaunchAgents/`

The skill directs installation of a launchd property list under LaunchAgents. That task persists after the web process exits.

High

SKILL.md:236

Windows scheduled task creation

- **Windows**:通过 `schtasks /create` 注册到 Windows 任务计划程序

The skill directs creation of a Windows scheduled task through schtasks. That task persists after the web process exits.

High

multiple:1

[HEURISTIC] SUSPICIOUS COMBINATION: Code execution + Persistence mechanism

This combination is common in malware that maintains access

The skill combines intentional Python command execution with launchd and Windows scheduled-task persistence. The stated scheduling purpose is legitimate but remains security-sensitive.

High

SKILL.md:135-136 SKILL.md:160-169

Unescaped User Content in Shell Command Template

The print template places user-supplied title and content in a shell command without requiring escaping or an argument-array execution API.

The documentation joins user text with a command template and gives no escaping rule. Actual exploitability depends on the absent execution implementation.

Medium

README.md:111-119

Unverified Third-Party Installation Workflow

The README asks an agent to follow mutable SkillHub instructions and install software without a pinned revision, checksum, or reviewed command set.

The installation prompt and external instruction URL are explicit. The remote content was not included, so its integrity cannot be verified.

Medium

README.md:26-30 SKILL.md:212-215

Automatic Unpinned Dependency Installation

The documented launcher automatically installs Flask and APScheduler, while the manual command also omits versions and integrity checks.

Both files explicitly describe dependency installation without pinned versions. The absent launcher prevents verification of additional safeguards.

Show all 9 confirmed findings

Medium

SKILL.md:75-92 SKILL.md:141-150

User-Controlled Internal Network Destinations

The workflow accepts an arbitrary IP and port for connectivity checks and printing without documenting an allowlist or destination validation.

The instructions explicitly map user-provided addresses into network commands. Missing scripts prevent confirmation of runtime validation.

Capability review items (7)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

SKILL.md:235-236

Ruby/shell backtick execution

- **macOS**:导出为 launchd plist,安装到 `~/Library/LaunchAgents/`

The range describes installing macOS and Windows system scheduler entries. Those actions invoke operating-system tools and create persistent tasks.

Medium

README.md:114

Hardcoded URL

请先检查是否已安装 SkillHub 商店,若未安装,请根据 https://skillhub.cn/install/skillhub.md 安装 SkillHub 商店,然后安装 meituan-p

The URL directs an agent to mutable third-party installation instructions. Following it can introduce unverified code or changed commands.

Medium

SKILL.md:26

Ruby/shell backtick execution

2. **终端命令**:macOS/Linux 执行 `python3 scripts/start_web_admin.py`,Windows 执行 `python scripts\start_web

The instruction explicitly asks the agent to launch a local Python script. Fixed arguments reduce injection risk, but command execution is intentional.

Medium

SKILL.md:90-92

Ruby/shell backtick execution

```bash

The fenced block contains a connectivity-check command using supplied IP and port values. It intentionally starts an external Python process.

Medium

SKILL.md:135-137

Ruby/shell backtick execution

```bash

The fenced block contains the documented print command and intentionally invokes a local Python process. Its target and content come from workflow inputs.

Medium

SKILL.md:212-213

Ruby/shell backtick execution

**macOS/Linux**:`python3 scripts/start_web_admin.py`

This line explicitly instructs macOS and Linux users or agents to launch the web administration script with Python.

Medium

SKILL.md:213-217

Ruby/shell backtick execution

**Windows**:`python scripts\start_web_admin.py`

This line explicitly instructs Windows users or agents to launch the web administration script with Python.

Risk Factors

🌐 Network access (15)

config.example.json:6 config.example.json:13 config.example.json:20 README.md:62 README.md:68 README.md:114 README.md:96 README.md:127 README.md:188 README.md:302 SKILL.md:28 SKILL.md:217 SKILL.md:78 SKILL.md:107 SKILL.md:180

⚙️ External commands (35)

Detected Patterns

macOS launch agent/daemon×2Windows scheduled task creation×2

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/chenyangshu-meituan-printer/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/chenyangshu-meituan-printer/security.svg)](https://skillstore.io/skills/chenyangshu-meituan-printer?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/chenyangshu-meituan-printer?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/chenyangshu-meituan-printer/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/chenyangshu-meituan-printer.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

chenyangshu. (2026). meituan-printer security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/chenyangshu-meituan-printer/audits/8

BibTeX citation

@techreport{chenyangshu-chenyangshu-meituan-printer-2026,
  author = {chenyangshu},
  title = {meituan-printer security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/chenyangshu-meituan-printer/audits/8},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "meituan-printer security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
  - name: "chenyangshu"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/chenyangshu-meituan-printer/audits/8"
identifiers:
  - type: other
    value: "skillstore:chenyangshu-meituan-printer:audit:8"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Prepare Daily Kitchen Slips

Draft and preview shift tasks before sending them to a configured kitchen printer.

Document Printer Setup

Organize printer aliases, addresses, ports, types, and connectivity checks for a store network.

Plan Recurring Print Jobs

Define daily, weekly, or monthly task slips and review operating-system scheduling requirements.

Try These Prompts

Prepare a Test Slip

Create a preview for a kitchen test slip. Use the title Printer Test and include checks for paper, connection, and cutter.

Configure a Printer

Help me configure a printer alias. Ask for its LAN address, port, type, and remark, then show the proposed entry before any change.

Troubleshoot Connectivity

Prepare a safe connectivity-check plan for my configured printer. Validate the destination, explain expected results, and wait before running any command.

Plan a Recurring Task

Design a weekly closing checklist print job. Preview the slip and scheduler definition, explain persistence, and require explicit approval before system changes.

Best Practices

Verify the printer alias, address, and port against an approved store inventory.
Preview the title and content, then obtain explicit confirmation before sending a print job.
Treat scheduler export as a persistent system change and document how to remove each task.

Avoid

Do not send print jobs to unverified addresses or arbitrary ports.
Do not insert untrusted title or content text into a shell command.
Do not install dependencies or create persistent tasks without explicit user approval.