Lianke Print Box

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a coherent cloud printing/scanning skill, but it installs an external CLI and uses device credentials to handle documents through the Lianke service.

Before installing, make sure you trust the lk-print package source and understand where credentials are stored. When using the skill, confirm the exact file, printer/scanner, copy count, and task ID before allowing print, scan, cancel, or delete actions, especially for confidential documents.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used on an ambiguous request, the agent could print the wrong file, use the wrong printer, or cancel/delete the wrong task.

Why it was flagged

The skill exposes CLI actions that submit print jobs and cancel or delete print/scan tasks. This is consistent with the stated purpose, but the actions affect a physical device and documents.

Skill content
lk-print print /path/to/file.pdf ... lk-print cancel-job <task_id> ... lk-print scan-delete <task_id>
Recommendation

Confirm the file, printer/scanner, copies, and task ID before submitting, canceling, or deleting print/scan jobs.

What this means

Anyone who obtains these credentials may be able to access or operate the configured Lianke print device.

Why it was flagged

The skill requires Lianke API and device credentials. This is expected for remote device access, but those credentials authorize access to the user’s cloud print box.

Skill content
lk-print auth --api-key <YOUR_API_KEY> --device-id <YOUR_DEVICE_ID> --device-key <YOUR_DEVICE_KEY>
Recommendation

Store credentials securely, avoid sharing them in chats or logs, and rotate them if they may have been exposed.

What this means

Future installs may fetch different code than the version originally reviewed or expected.

Why it was flagged

The install source is an unpinned GitHub git URL that creates the lk-print binary. Installing a CLI is central to this skill, but an unpinned remote source can change over time.

Skill content
uv | package: git+https://github.com/liankenet/ai-lk-print-box.git | creates binaries: lk-print
Recommendation

Install only if you trust the Lianke GitHub repository, and prefer a pinned release or commit when available.

What this means

Printed files or scanned documents may be handled by the Lianke cloud service and the configured device.

Why it was flagged

The workflow sends print inputs and scan tasks through a cloud print-box CLI/provider flow. This is expected for cloud printing/scanning, but document contents may be sensitive.

Skill content
通过 `lk-print` CLI 操作链科云打印盒,远程控制打印机和扫描仪。 ... lk-print print /path/to/file.pdf ... lk-print scan <scanner_id>
Recommendation

Avoid sending highly sensitive documents unless you are comfortable with the service’s handling of print and scan data.