Printer Ai

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is coherently focused on local printer management, with the main things to notice being that it can cause real print-job actions and installs a CLI from a GitHub source.

Before installing, make sure you trust the GitHub source used to install the printer-ai CLI. When using the skill, verify the file path, printer selection, print options, and job IDs because its intended actions can physically print documents or cancel printer jobs.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

If invoked on the wrong file, printer, or job ID, the agent could print unintended documents or cancel an existing print job.

Why it was flagged

The skill documents commands that can start physical print jobs and cancel queued jobs. This is expected for a printer-management skill, but it has real-world side effects.

Skill content

printer-ai print /path/to/file.pdf ... printer-ai cancel-job JOB_ID

Recommendation

Confirm the target file, printer index, copy count, and job ID before asking the agent to print or cancel jobs.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing the skill may fetch and run code from the referenced GitHub repository through the uv tool installation process.

Why it was flagged

The install source is a GitHub git URL rather than reviewed code included in the supplied artifact set. This is a common install pattern, but users must trust that external repository.

Skill content

uv | package: git+https://github.com/NullYing/printer-ai-skills.git | creates binaries: printer-ai

Recommendation

Install only if you trust the repository source, and prefer a pinned or reviewed release when available.