Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Kiln
v0.5.0Control 3D printers with AI agents — 430 MCP tools, 114 CLI commands, text/sketch-to-3D generation, model marketplace search, multi-printer fleet support, sa...
⭐ 0· 606·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name, description, required binaries (kiln, prusaslicer/orcaslicer) and primary env vars (KILN_PRINTER_HOST, KILN_PRINTER_API_KEY) match the stated purpose of controlling local 3D printers and invoking fulfillment providers. The optional fulfillment/LLM provider env vars are consistent with the documented features (outsourced manufacturing, text→3D providers).
Instruction Scope
The SKILL.md runtime instructions stay within the printing/orchestration domain (CLI/MCP commands, preflight checks, upload/print flows). However, the shipped file set includes many unrelated documents (legal drafts, conflict responses) and operational notes that contain sensitive or identifying information (for example, a Bambu adapter doc contains a specific local IP, access code, and serial for a named individual's printer). Those files are not required for runtime and their inclusion is unnecessary and risky—someone installing this skill is getting extraneous confidential/internal material baked into the bundle.
Install Mechanism
Install spec uses a 'uv' package pointing to a GitHub repo (https://github.com/codeofaxel/Kiln.git, subdirectory 'kiln'). GitHub is a common source, but pulling and extracting code from a specific user repo (rather than a vetted release or organization-owned repo) increases supply-chain risk. The manifest already includes source files, so confirm whether install is actually needed. No URL shorteners or personal IPs observed in the install spec.
Credentials
Required env vars are limited to KILN_PRINTER_HOST and KILN_PRINTER_API_KEY (appropriate for controlling a printer). The many optional env vars for fulfillment and generation providers are explainable by the skill's features. Still: the SKILL auto-discovers providers from env vars, so do not populate optional provider/LLM keys unless you trust the install source and need those integrations.
Persistence & Privilege
The skill saves config to ~/.kiln/config.yaml and to local SQLite as described—this is expected for a local-first print orchestration tool. always is false and there is no request to modify other skills or system-wide agent settings.
What to consider before installing
This skill is largely coherent with its stated purpose (local 3D printer control), but take precautions before installing or providing credentials: 1) Inspect the GitHub repo referenced by the install spec (https://github.com/codeofaxel/Kiln.git) — verify maintainer identity and recent commits or releases. 2) Review included files inside the bundle for hardcoded secrets or PII (e.g., the Bambu doc contains a specific IP and access code); remove or redact such files before running. 3) Only provide KILN_PRINTER_HOST/KILN_PRINTER_API_KEY for printers you control on a trusted local network; avoid exporting other optional provider/LLM API keys unless needed. 4) If you must test, run in an isolated environment (VM or container) and monitor outbound network calls to ensure it doesn't contact unexpected endpoints. 5) If you need higher assurance, request the upstream project's official release (signed release or organization-owned repo) or a minimal runtime-only package with docs stripped.Like a lobster shell, security has layers — review code before you run it.
3d-printingvk97350ykhnax54sr1mt1nj05sd83asywai-agentvk97350ykhnax54sr1mt1nj05sd83asywbambuvk97350ykhnax54sr1mt1nj05sd83asywelegoovk97350ykhnax54sr1mt1nj05sd83asywklippervk97350ykhnax54sr1mt1nj05sd83asywlatestvk97350ykhnax54sr1mt1nj05sd83asywmanufacturingvk97350ykhnax54sr1mt1nj05sd83asywmcpvk97350ykhnax54sr1mt1nj05sd83asywmoonrakervk97350ykhnax54sr1mt1nj05sd83asywoctoprintvk97350ykhnax54sr1mt1nj05sd83asywprintervk97350ykhnax54sr1mt1nj05sd83asywprusavk97350ykhnax54sr1mt1nj05sd83asyw
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🏭 Clawdis
OSmacOS · Linux
Binskiln
Any binprusaslicer, orcaslicer
EnvKILN_PRINTER_HOST, KILN_PRINTER_API_KEY
Primary envKILN_PRINTER_HOST
Install
uv