Security audit

云上驱动打印

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a real cloud-assisted printing skill, but it needs review because it uploads documents and printer details to a cloud service and can submit real print jobs without a clear consent or privacy control.

Install only if you trust any.webprinter.cn with the documents and printer metadata you intend to print. Avoid confidential or regulated files unless the provider's handling, retention, and access controls are acceptable, keep CDF_PRINT_API_KEY scoped, and do not use the raw TCP/9100 fallback except on a trusted test printer.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (8)

Vague Triggers

Medium

Confidence: 87% confidence
Finding: The trigger guidance is extremely broad around generic user requests like '打印这个文件到某打印机，打N份', which overlaps with normal conversation and can cause unintended invocation of a skill that uploads files to a cloud service and sends jobs to network printers. Because printing is a side-effecting action involving document transmission and device control, accidental activation is materially risky.

Missing User Warnings

High

Confidence: 98% confidence
Finding: The skill description openly states that documents may be uploaded to a cloud service for conversion and rendering, but it does not provide a clear user-facing warning about data transmission, retention, or privacy implications. This is particularly dangerous because documents intended for printing often contain sensitive personal, legal, financial, or internal business information, and the skill routes them off-device by design.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The function sends user-derived printer model data to a cloud endpoint via `_post_json` without any visible consent, minimization, or trust-boundary controls in this file. In a LAN-printing skill, printer model queries can reveal internal device inventory or user workflow details, and the cloud-assisted design increases privacy and data-governance risk if the endpoint is remote or misconfigured.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The code uploads local files to a cloud endpoint and later uses cloud-generated print data, but there is no consent, disclosure, destination validation, or policy control in this module. In an agent automation context, that creates a real risk of silent exfiltration of sensitive documents outside the local network boundary, especially because the skill description explicitly supports cloud upload and conversion.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The code derives a search query from printer metadata such as model, name, or IP address and sends it to network-backed functions (`guess_model` / `search_driver`) without any explicit notice, consent, or minimization at the call site. In this skill's context, printer identifiers and especially internal LAN IPs can reveal sensitive infrastructure details to a cloud service, creating a real privacy and information-disclosure risk even if no direct code execution occurs.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The code uploads the document with upload_file_mcp() and then submits a remote print job via print_for_skill() without any explicit consent prompt or clear notice that document contents are being transmitted off-host. In a printing skill, users may reasonably expect LAN-only handling, so silent remote transfer can expose sensitive documents to cloud storage, processing systems, or logs.

Missing User Warnings

Medium

Confidence: 97% confidence
Finding: For non-PDF files, the function first attempts cloud conversion via convert_url_to_pdf() using uploaded content, again without explicit warning or opt-in. This increases exposure because documents may be processed by an additional remote conversion service, potentially including confidential business files that users intended only to print locally.

Missing User Warnings

Medium

Confidence: 85% confidence
Finding: The document explicitly describes a fallback that sends print data directly to a network printer over raw TCP/9100, bypassing the cloud service's controls and without any meaningful warning about confidentiality, authentication, or misuse risks. In a printing skill, this is security-relevant because it normalizes direct unauthenticated network printing and could lead operators to transmit sensitive documents to devices on the LAN with little auditability or protection.

Static analysis

No suspicious patterns detected.