v1.0.0

Printer skill

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 4:43 AM.

Analysis

This is a coherent macOS printer-management skill with expected but powerful printer-control, admin, optional package, and keep-alive actions that should be approved before use.

GuidanceUse this skill only if you want the agent to manage macOS CUPS printers. Before running commands, verify the printer name/IP and file path, and explicitly approve any sudo command, cancel-all/disable/reject/remove action, launchd keep-alive setup, or optional Homebrew net-snmp install.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityLowConfidenceHighStatusNote

SKILL.md

lp -d MyPrinter filename.pdf; cancel -a MyPrinter        # cancel all; cupsdisable MyPrinter; cupsreject MyPrinter; lpadmin -x MyPrinter

These purpose-aligned printer commands can send files to a printer, cancel all jobs for a printer, pause or reject printing, or remove a configured queue.

User impactA mistaken printer name, job ID, or file path could disrupt printing or send a document to the wrong printer.

RecommendationConfirm the target printer, job ID, and file before running commands; require explicit approval for cancel-all, disable/reject, remove, or sensitive-document print actions.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceHighStatusNote

SKILL.md

Requires `brew install net-snmp`:

The optional toner-level workflow introduces an external Homebrew package that is not part of the declared required binaries.

User impactUsing the toner feature may install additional software on the Mac.

RecommendationTreat net-snmp as optional; install it only if toner-level SNMP queries are needed and the user approves the package install.

Rogue Agents

SeverityLowConfidenceHighStatusNote

SKILL.md

ipptool -q -T 3 -i 300 ipp://PRINTER_IP/ipp/print get-printer-attributes.test; For persistent keep-alive, create a launchd agent.

The keep-alive guidance includes repeated polling and suggests creating a persistent launchd agent, which could continue running after the immediate task.

User impactThe Mac could keep sending periodic requests to the printer until the keep-alive process or launchd agent is stopped.

RecommendationCreate persistent keep-alive jobs only with explicit user consent, use a clear label and interval, and provide instructions to disable or remove the launchd agent.

Permission boundary

Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.

Identity and Privilege Abuse

SeverityLowConfidenceHighStatusNote

SKILL.md

sudo lpadmin -p MyPrinter -o cupsSNMPSupplies=true; sudo lpadmin -p MyPrinter -o sides-default=two-sided-long-edge

The instructions include administrator-privileged CUPS configuration changes, which are expected for some printer settings but cross a local privilege boundary.

User impactRunning these commands with sudo can change system-wide printer behavior for the Mac or CUPS service.

RecommendationOnly run sudo printer-configuration commands after the user confirms the exact printer and setting change.