Security audit

InkJet - Bluetooth Thermal Printer

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward thermal-printer helper, with ordinary installation and printing risks that users should handle carefully.

Before installing, confirm that the inkjet package or Homebrew tap is the source you intend to trust. Use an unprivileged environment when possible, avoid sudo, run inkjet whoami or specify --address before printing, and do not print secrets, credentials, tokens, or personal data unless the physical printer location is trusted.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:4
Finding: Unpinned Third-Party Package Installation
Content: View full analysis
Remediation: View remediation
" ``` 2. Require integrity verification, such as a locked requirements file containing cryptographic hashes: ```bash python -m pip install --require-hashes -r requirements.txt ``` 3. Document the authoritative upstream repository and verify that the PyPI publisher, source repository, and expected package ownership correspond. 4. Prefer an official, trusted distribution channel. If the third-party Homebrew tap is necessary, pin or otherwise verify the formula revision and downloaded artifact checksum. 5. Review the pinned package's source, build configuration, transitive dependencies, and installation hooks before approving it for agent-controlled installation. 6. Perform installation and execution as an unprivileged user in an isolated environment, such as a dedicated Python virtual environment or sandbox. Do not use `sudo` for package installation. 7. Introduce an explicit dependency-update process so newer versions are reviewed and their pins and hashes are updated deliberately rather than being selected automatically at installation time. ]]>

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The skill performs immediate physical output to nearby Bluetooth thermal printers but does not prominently warn users that invoking it can consume paper, reveal sensitive information in a shared physical space, or send output to the wrong configured device. In this context, the omission is a real but low-severity safety issue because the skill is explicitly designed to print, including routed and default-printer workflows that increase the chance of unintended disclosure or waste.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.