Back to skill

Security audit

Brother DCP-T426W Printer

Security checks across malware telemetry and agentic risk

Overview

This printer skill mostly matches its stated purpose, but it also bundles an unrelated Sonos speaker-control skill that users would not expect from a printer package.

Review this package before installing. The printer script itself appears to perform local printing as described, but the bundled Sonos skill should be removed or clearly explained because it can add unrelated speaker-control behavior and an extra external tool install. Also verify the hardcoded printer IP is yours before printing sensitive files, and only run the sudo CUPS setup if you intend to make persistent printer configuration changes.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

67/67 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.