ClawHub
Back to skill

Security audit

Printer skill

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward macOS printer-management guide, but some commands can change or remove printer queues if the user approves running them.

Install this only if you want an agent to help manage macOS printers. Before approving commands, verify the exact printer name, IP address, file path, and job ID. Be especially careful with sudo commands, cancel-all actions, disabling or rejecting printers, removing queues, installing optional SNMP tools, or setting up any persistent keep-alive agent.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill documents destructive printer-administration commands such as cancelling all jobs and removing/reconfiguring printers without requiring confirmation or warning the operator about their effects. In an agent-executed context, these commands can disrupt business operations, destroy queued work, or alter printing infrastructure if invoked on the wrong target.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.