Flashforge 3D Print
v1.2.0Automate and control Flashforge Adventurer 5M 3D printers via netcat for status, print jobs, temperature, homing, file management, and slicing.
⭐ 0· 321·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The metadata/description claims control 'via netcat' but the SKILL.md shows a Python script (ralph_wiggum.py) and a Flashforge Python API workflow instead — netcat usage is not shown. The SKILL.md also lists files (ralph_wiggum.py, WORKFLOW.md) that are not present in the package manifest, which is inconsistent with the stated purpose and execution model.
Instruction Scope
Runtime instructions tell the agent/user to run a local Python script, pip-install packages, call a PrusaSlicer CLI, and curl camera endpoints on 10.0.0.41. Those commands rely on missing local files and externally installed binaries (PrusaSlicer) that are not declared. The instructions also reference activating a specific virtualenv path (~/.openclaw/workspace/.venv) — an environment-specific action that may not exist. The instructions do not request unrelated system credentials, but they do instruct network access to a hard-coded local IP and camera endpoint.
Install Mechanism
No formal install spec is provided (instruction-only), which minimizes automatic disk writes. SKILL.md suggests running pip install flashforge-python-api requests manually; that is user-executed and not part of an automated installer in the package. Because there's no download/install step in the skill bundle itself, install-mechanism risk from the registry package is low — but the suggested pip installs should be verified by the user.
Credentials
The skill requests no environment variables or credentials, which is proportionate. However, it embeds specific network targets (printer IP 10.0.0.41), a serial number, and a 'check code' in the documentation — hard-coded network targets and codes may be sensitive or surprising. The instructions also implicitly require locally installed tools (PrusaSlicer CLI, Python script) that aren't declared as requirements.
Persistence & Privilege
The skill does not request always:true and does not declare any persistent/system-wide modifications. Autonomous invocation is allowed (platform default) but not combined with other high-risk factors in the registry metadata.
What to consider before installing
This skill is missing the referenced controller script (ralph_wiggum.py) and other files it tells you to run — ask the publisher for the source or an official repository before installing. Verify the origin of the suggested pip packages (flashforge-python-api) and avoid installing them globally; prefer an isolated virtualenv. Be aware the instructions will make network requests to the hard-coded IP and camera endpoints (10.0.0.41:8080) — confirm that is a device you control. If you decide to proceed, run in a sandboxed environment, review any downloaded code before executing, and request the missing files or a link to their canonical source so you can inspect them for unexpected behavior.Like a lobster shell, security has layers — review code before you run it.
3d-printingvk97c5hvgdzam8nehhvg5aqgz2h824nfzautomationvk97c5hvgdzam8nehhvg5aqgz2h824nfzcameravk97c5hvgdzam8nehhvg5aqgz2h824nfzflashforgevk97c5hvgdzam8nehhvg5aqgz2h824nfzlatestvk97c5hvgdzam8nehhvg5aqgz2h824nfz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.