Security audit
Security checks for vulnerabilities and agentic risk
This printer repair skill needs review because it recommends clearing entire print queues and changing device settings without adequate safeguards against losing jobs or configuration.
Use diagnostics first and inspect pending jobs before enabling repairs. Require approval before clearing queues, restarting printing services, changing firmware, or resetting saved settings. Prefer canceling only the affected job, confirm the network being scanned, and use vendor procedures for the exact printer model with settings backed up.
Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.
else:
print("No CUPS lpstat. Windows: net stop spooler && del /Q "
"%SYSTEMROOT%\\System32\\spool\\PRINTERS\\*.* && net start spooler")
print("macOS: cancel -a - ; sudo launchctl kickstart -k system/org.cups.cupsd")
def probe(ip, port, timeout=0.6):
Without declared permissions the skill's intent is opaque and cannot be validated.
The skill recommends firmware downgrades and model-specific NVRAM resets without warning that older firmware may restore patched vulnerabilities or that resets may erase network and security configuration. Although these operations can be legitimate troubleshooting measures, the escalation workflow could lead an agent to perform disruptive changes without informed approval, potentially disabling the printer or leaving it less secure.
The repair instructions delete spool files or cancel queued jobs without warning about job loss or requiring confirmation. Although queue clearing is a legitimate printer troubleshooting step, these broad operations can discard unrelated users' pending jobs and disrupt shared printing rather than just resolve the reported stuck job.
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
## 4. Spooler surgery
- Windows: `net stop spooler & del /Q %SYSTEMROOT%\System32\spool\PRINTERS\*.* &
net start spooler`
- macOS: `cancel -a -` then restart `cupsd` (`sudo launchctl kickstart -k system/org.cups.cupsd`)
- Linux/CUPS: Web UI http://localhost:631 → Jobs → Cancel All; `cancel -a`;
stuck jobs in /var/spool/cups.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
def cmd_spooler(args):
import shutil
if shutil.which("lpstat"):
r = subprocess.run(["lpstat", "-W", "all", "-o"], capture_output=True, text=True)
jobs = [l for l in (r.stdout or "").splitlines() if l.strip()]
print(f"CUPS jobs: {len(jobs)}")
for j in jobs[:10]:
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
for j in jobs[:10]:
print(" " + j)
if args.fix and jobs:
subprocess.run(["cancel", "-a"], capture_output=True)
print("→ cancel -a sent; remaining:")
r2 = subprocess.run(["lpstat", "-o"], capture_output=True, text=True)
print(r2.stdout or " (none — queue clear)")
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
if args.fix and jobs:
subprocess.run(["cancel", "-a"], capture_output=True)
print("→ cancel -a sent; remaining:")
r2 = subprocess.run(["lpstat", "-o"], capture_output=True, text=True)
print(r2.stdout or " (none — queue clear)")
else:
print("No CUPS lpstat. Windows: net stop spooler && del /Q "
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
else:
print("No CUPS lpstat. Windows: net stop spooler && del /Q "
"%SYSTEMROOT%\\System32\\spool\\PRINTERS\\*.* && net start spooler")
print("macOS: cancel -a - ; sudo launchctl kickstart -k system/org.cups.cupsd")
def probe(ip, port, timeout=0.6):
Skill allows unbounded resource consumption (API calls, storage, compute). Without rate limits or quotas, a compromised or misbehaving agent can cause denial-of-service or cost overruns.
print("macOS: cancel -a - ; sudo launchctl kickstart -k system/org.cups.cupsd")
def probe(ip, port, timeout=0.6):
try:
with socket.create_connection((ip, port), timeout=timeout):
return True
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
import shutil
if not shutil.which("avahi-browse"):
return []
r = subprocess.run(["avahi-browse", "-rt", "_ipp._tcp"], capture_output=True,
text=True, timeout=8)
found = []
for line in (r.stdout or "").splitlines():
No suspicious patterns detected.