Printer
PassAudited by ClawScan on May 1, 2026.
Overview
This printer skill is purpose-aligned, but it can submit real print jobs and creates local temporary print files, so users should confirm the file, printer, and options before use.
This skill appears appropriate if you want an agent to print PDFs or images through CUPS. Before installing or using it, make sure you trust the local CUPS setup, confirm each print job’s file and destination printer, and be aware that image printing may create temporary local PDFs.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If invoked with the wrong file, printer, or options, the agent could waste paper/ink or print sensitive material to a physical device.
The skill intentionally exposes CUPS print options and can submit jobs to a printer; this is expected for a printer skill, but the options can affect trays, duplexing, quality, and other physical print behavior.
- **`-o KEY=VALUE`**: Pass any CUPS option (repeatable).
Confirm the target file, printer, and important print options before allowing a print job, especially for sensitive documents.
Users may have less clarity about the exact packaged project provenance and dependency version they are installing for image printing.
The project metadata does not fully match the registry skill name/version/description, and the Pillow dependency is specified with a broad minimum version. This is not evidence of malicious behavior, but it is supply-chain and provenance hygiene users should notice.
name = "hp-print"
version = "0.1.0"
description = "Print images and PDFs to HP Color LaserJet printer"
dependencies = [
"pillow>=10.0.0",
]Install Pillow from a trusted package source, consider pinning dependency versions in controlled environments, and maintainers should align pyproject metadata with the published skill.
Sensitive images may be copied into a local temporary PDF during printing.
When printing images, the skill converts the image into a local temporary PDF that is not automatically deleted on close by this call. This is a purpose-aligned intermediate file, but it can contain the user’s printable content.
temp_pdf = tempfile.NamedTemporaryFile(suffix='.pdf', delete=False) ... canvas.save(temp_pdf.name, "PDF", resolution=float(dpi))
Avoid printing sensitive images unless you are comfortable with local temporary conversion files, and clear temporary print files if needed.