Ticketmax
v0.1.3Print markdown files to an ESC/POS thermal receipt printer over TCP, USB, or serial. Supports headings, bold, underline, tables, images, QR codes, paper cuts...
⭐ 0· 45·0 current·0 all-time
by@yatesdr
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description, required binary (ticketmax), and required env var (PRINTER_ADDR) all match the stated goal of sending output to an ESC/POS printer over TCP/USB/serial.
Instruction Scope
SKILL.md instructs the agent to run the ticketmax CLI, set PRINTER_ADDR, and pipe markdown into the tool. It does not request reading unrelated files or additional environment variables, nor does it direct data to unexpected external endpoints.
Install Mechanism
Install uses `go install github.com/yatesdr/ticketmax@latest` which will fetch and compile code from the project's GitHub. This is a normal install path for a Go CLI, but it does execute remote source at build time — a standard supply-chain consideration. The host (github.com) is a well-known release host.
Credentials
Only PRINTER_ADDR is required (primaryEnv). That is proportionate to a tool that needs the printer device or network address. No unrelated secrets or config paths are requested.
Persistence & Privilege
Skill is not always-enabled and does not request elevated or cross-skill configuration. It only requires a binary and an env var; autonomous invocation is allowed but is the platform default and not combined with other red flags.
Assessment
This skill appears coherent and does what it says: it runs a CLI to print markdown to ESC/POS printers. Before installing, consider: (1) `go install` will fetch and build code from the GitHub repo — review the upstream source or pinned version if you need high assurance; (2) the binary will be able to access device paths (e.g., /dev/ttyUSB0) and network printer addresses — avoid setting PRINTER_ADDR to sensitive network endpoints; (3) printing may reveal confidential text you pipe into it, so confirm outputs before printing. If you require stronger supply-chain guarantees, install from a reviewed release or vendor-provided binary rather than `@latest`.Like a lobster shell, security has layers — review code before you run it.
latestvk97ab6qeetb4y0k5mvkvpdynex844d7s
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🖨️ Clawdis
Binsticketmax
EnvPRINTER_ADDR
Primary envPRINTER_ADDR
Install
Go
Bins: ticketmax