智睦云打印
v1.0.10调用官方 WebPrinter 云打印服务（webprinter.cn），支持查询打印机、上传本地文件、创建漫游打印任务、直接打印到指定设备，以及分别更新单双面、颜色和份数等打印参数。
⭐ 0· 135·0 current·0 all-time
by@zimsoft
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, SKILL.md, README, and the included Python client (scripts/mcp_client.py) all implement the same purpose: interacting with the WebPrinter API (query printers, upload files, create tasks, direct print, update settings). There are no unrelated credentials, binaries, or external endpoints beyond the documented base URL (https://any.webprinter.cn).
Instruction Scope
SKILL.md instructs the agent to run the bundled Python client and to only use local files or user-provided HTTPS URLs (passing URLs to the server rather than fetching them locally). The instructions explicitly disallow localhost/.local and internal IP targets. Minor mismatches: an early line in SKILL.md mentions accepting `http://` or `https://` links but the client enforces HTTPS-only; the SKILL.md also allows only URLs that the print service can access. Overall the runtime instructions remain within the described printing scope and do not attempt to read unrelated files or system secrets.
Install Mechanism
No install spec is provided (instruction-only with bundled code). The only dependency is requests (requirements.txt). No downloads from arbitrary URLs, no extract steps, and the script is run locally. Risk from install mechanism is low.
Credentials
The only required secret is a single bearer token (WEBPRINTER_ACCESS_TOKEN), which is appropriate for a cloud-print client. However, there is a metadata inconsistency: the top-level 'Requirements' summary in the registry metadata listed no required env vars, while SKILL.md and _meta.json declare WEBPRINTER_ACCESS_TOKEN as required. The skill accesses only this env var and no other sensitive variables.
Persistence & Privilege
The skill does not request permanent/always-on presence and does not modify other skills or global agent settings. Autonomy (allowing model invocation) is set to the platform default and is not combined with other high-risk privileges.
Assessment
This package is a straightforward client for the official WebPrinter service (https://any.webprinter.cn) and only needs a single bearer token (WEBPRINTER_ACCESS_TOKEN). Before installing: 1) Confirm the token you supply is obtained from the official WebPrinter OAuth URL and that you trust that service; this skill will upload local files and will pass user-provided URLs to the WebPrinter servers. 2) Do not provide internal-only URLs (localhost/.local or private IPs) because the skill and client explicitly disallow them — give only externally reachable HTTPS URLs or upload local files. 3) Note a minor metadata inconsistency: the registry summary omitted the required env var while SKILL.md and _meta.json declare it; ensure you set WEBPRINTER_ACCESS_TOKEN before use. 4) Because the source/publisher and homepage are not linked, verify the origin (owner ID) or obtain the client from the vendor if you require higher assurance. If you need the agent to fetch and inspect URLs locally before sending them to the print service, be aware the skill is designed not to download remote documents — it passes the URL to the service instead.Like a lobster shell, security has layers — review code before you run it.
latestvk972a0pzpc5mt32grrv87j7an184bgzx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.