upload-file — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited upload-file (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this when the user asks to upload a file from their own computer to SimplyPrint (STL, 3MF, gcode, etc.). This uses a small helper script because MCP tools cannot read files off the local disk.
The helper targets files.simplyprint.io — the API-facing file-upload service. It returns a hex hash (the API file id) which can later be passed to queue/AddItem as fileId or printers/actions/CreateJob as file_id.
Requirements:
SIMPLYPRINT_API_KEY and SIMPLYPRINT_COMPANY_ID must be set in the environment. If they are missing, stop and tell the user to set them (point at docs/env-vars.md in the plugin folder).${CLAUDE_PLUGIN_ROOT}/scripts/upload.sh on macOS/Linux/Git Bash, and ${CLAUDE_PLUGIN_ROOT}/scripts/upload.ps1 on Windows PowerShell 7+.Steps:
.ps1; otherwise use the .sh.--file <path> (or -File on PowerShell).FILE_ID=<hex-hash>. Everything on stderr is human-readable context, not structured output.queue-print with --file-id), start it on a printer (start-print with --file-id), or just keep the id for later.If the helper exits non-zero, show the stderr text to the user verbatim. Common causes: missing env vars, wrong company id, revoked API key, file too large (>100 MB per part — the helper currently uploads single-part only), account not on Print Farm plan.
Do not try to reimplement the upload by calling raw HTTP yourself. Always go through the helper script so behaviour stays consistent with the other flows (start-print, queue-print).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.