Skills/ClawHub/kiln

kiln@1.5.1

VERIFIED

Publisher claims: "Design, check, slice, print and monitor on real 3D printers through the Kiln MCP server and CLI. Use when the user wants to make or 3D print an object, turn an idea, photo or sketch into a printable model, check or repair an STL, 3MF, OBJ or STEP file, pick a material, estimate print time or cost, find a model to print, or check on a printer or a running print. Works with Bambu Lab, Creality, Prusa, Elegoo, Klipper/Moonraker, OctoPrint, Duet and USB-connected printers." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher codeofaxel · joined 8 days agoInstalls 3,963Last detonated 55 min ago
$clawhub install kiln
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 90/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Prompt injectionREADME.md:208 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
HIGH
Authorization escalation languageREADME.md:208 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
HIGH
Financial transfer languageREADME.md:610 · Financial transfer language — potential advance-fee scamFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01