Bambu LabsSAFE
Give your agent CAD superpowers.
Overview
Give your agent CAD superpowers.
3fa52b3ee6bbOBSERVED · 2026-10-20What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: bambu-labs description: Send prints to Bambu Lab printers through Bambu Connect, Bambu Lab's official app for printing from other software, or Bambu Studio. Use when the user wants to print a sliced `.gcode.3mf`, a Bambu `.gcode` or an unsliced model on a Bambu Lab printer, over Bambu Cloud or LAN. The agent opens the file in the app; the user picks the printer and starts the print there. license: MIT --- # Bambu Labs Provenance: maintained in [earthtojake/text-to-cad](https://github.com/earthtojake/text-to-cad). Use the installed local skill files as the runtime source of truth; the repository link is only for provenance and release review. Bambu Lab printers take print jobs from other software only through Bambu Connect, Bambu Lab's desktop app for third-party tools (https://wiki.bambulab.com/en/software/third-party-integration). This skill opens a file in Bambu Connect, or an unsliced model in Bambu Studio; the user picks the printer and starts the print there. The agent never controls a printer and never asks for access codes. ## Requirements Bambu Connect (Windows 10 or later, macOS 13 or later), signed in to the user's Bambu Lab account, with the printer on that account or reachable in LAN mode (https://wiki.bambulab.com/en/software/bambu-connect). On Linux, where Bambu Connect is still in development, use Bambu Studio. ## Choose the handoff | What the user has | Handoff | | --- | --- | | A sliced `.gcode.3mf`, from `$gcode` or Bambu Studio's or OrcaSlicer's "Export plate sliced file" | Open it in Bambu Connect | | A plain `.gcode` sliced with this printer's Bambu profile | Open it in Bambu Connect; if Bambu Connect refuses it, slice the model in Bambu Studio instead | | A model with no slice: `.3mf`, `.stl` or `.step` | Open it in Bambu Studio, which slices it and sends it to the printer itself | ## Open a file in Bambu Connect Bambu Connect imports a file from a `bambu-connect://import-file` link with three parameters: `path`, the file's absolute path, and `name`, the name to show, each percent-encoded the way JavaScript's `encodeURIComponent` does it (Python: `urllib.parse.quote(value, safe="")`); and `version=1.0.0`. For `/Users/me/prints/bracket.gcode.3mf`: ```text bambu-connect://import-file?path=%2FUsers%2Fme%2Fprints%2Fbracket.gcode.3mf&name=bracket&version=1.0.0 ``` Open the link with `open "<link>"` on macOS, or `Start-Process "<link>"` in PowerShell on Windows. Bambu Connect comes forward with the file loaded. ## Open a model in Bambu Studio On macOS run `open -a BambuStudio <file>` (some installs name the app `Bambu Studio`). On Windows open the file from Bambu Studio's File menu, or run `Start-Process <file>` when Bambu Studio is the file's default app. On Linux run `bambu-studio <file>`, or open it from the AppImage or Flatpak. ## Finish in the app Before the user presses Print, tell them what to check: the printer, plate type, nozzle, filament and AMS mapping, a clear build plate, and someone nearby for the first layer. Never report a print as started: the agent can't see the printer, and the app shows the job and its progress. ## Out of scope Starting, pausing or cancelling prints without the user, and reading printer status: Bambu Lab's firmware takes those from other software only through Bambu Connect, or in Developer Mode, which is LAN-only and disconnects the printer from Bambu Cloud. For slicing, use `$gcode` or Bambu Studio.
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
3fa52b3ee6bbfull audit observations/trust-audit/skill/earthtojake__bambu-labs.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-20 | 3fa52b3ee6bb | SAFE | B | 89 | first audit |
Questions
What does the bambu-labs — earthtojake/text-to-cad skill do?
Give your agent CAD superpowers.
Is bambu-labs — earthtojake/text-to-cad safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can bambu-labs — earthtojake/text-to-cad access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (3fa52b3ee6bb), read on 2026-10-20. The repository is watched, and a new audit runs when it changes — this is the first audit.
Add this badge to your README
Shows this page's audit result and links back to it. It updates when the audit does.
[](https://modelsatlas.com/skills/earthtojake/bambu-labs/)
Not your listing, or something out of date? Claim or update your listing.