🖨️ Bambu Lab Local Control — 本地控制3D打印机
v1.0.1通过 MQTT 协议在局域网内直接控制 Bambu Lab 3D 打印机（A1/A1 Mini/P1P/P1S/X1C），无需依赖云端，实现离线打印、状态监控与参数调整，保障数据隐私与稳定连接。
3· 2.5k·2 当前·3 累计
by 下载技能包
最后更新
2026/4/20
安全扫描
OpenClaw
安全
high confidenceThe skill's code, instructions, and requirements are coherent with its stated purpose (local MQTT control of Bambu Lab printers); no indicators of hidden exfiltration or unrelated privileges were found, though there are a few small security/operational notes to consider.
评估建议
This skill looks like what it claims: a local MQTT controller for Bambu printers. Before installing, consider: 1) Protect the config.json (it contains your printer access_code). Move it to a secure location or restrict file permissions so others on the machine cannot read it. 2) The code disables TLS certificate verification (tls_insecure_set(True)); that reduces MITM protection — acceptable on a trusted local LAN with self-signed certs, but be cautious on untrusted networks. 3) Verify the print...详细分析 ▾
✓ 用途与能力
Name/description match the implementation: bambu.py uses paho-mqtt to connect to a local printer IP over MQTT/TLS and publish/subscribe on device/{serial} topics. Declared binary (python3) and the required inputs (printer_ip, access_code, serial) are appropriate for the described functionality.
ℹ 指令范围
SKILL.md stays within the purpose (create venv, install paho-mqtt, create config.json with printer info, run the script). Two operational/security notes: the Python code disables TLS certificate verification (tls_set with CERT_NONE and tls_insecure_set(True)), which is likely to accommodate a self-signed cert but weakens MITM protections; and the instructions store the printer access_code in a plain config.json inside the skill folder (sensitive data at rest). The script does not read other system files or call external endpoints beyond the printer IP.
✓ 安装机制
No install spec is provided (instruction-only). The SKILL.md asks the user to pip install paho-mqtt into a venv — a low-risk, expected step for a Python MQTT client.
⚠ 凭证需求
The registry metadata declared no required config paths, but the runtime code requires a config.json placed alongside bambu.py (CONFIG_PATH). This mismatch is an informational inconsistency. The sensitive value requested (access_code) is proportional to the skill's purpose, but users should note it will be stored in plaintext by default in the skill folder unless they change that.
✓ 持久化与权限
The skill does not request always:true and does not modify other skills or system-wide settings. It runs when invoked and does not request elevated/persistent platform privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/1/25
Removed config.json, added config.example.json
● 可疑
安装命令
点击复制官方npx clawhub@latest install bambu-local
镜像加速npx clawhub@latest install bambu-local --registry https://cn.longxiaskill.com