ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

AceToolz QR Code Generator

v1.0.1

Generate QR codes for any URL or text instantly using AceToolz. Returns a hosted image URL ready to share in chat.

⭐ 0· 42·0 current·0 all-time
by@acetoolz
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the runtime instructions: the skill calls AceToolz's QR generator API and returns hosted image URLs. Nothing requested (no env vars, no binaries) is disproportionate to this purpose.
ℹ
Instruction Scope
SKILL.md directs the agent to run curl/Invoke-RestMethod to POST user-provided content to https://www.acetoolz.com/api/openclaw/qr-generator. It does not read local files or other environment variables. Note: user content is transmitted to a third-party service (AceToolz), which is expected for this skill but relevant for privacy.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest install risk. It relies on existing system tooling (curl/PowerShell) which is normal.
✓
Credentials
No environment variables, secrets, or config paths are requested. The skill does not ask for unrelated credentials or elevated access.
✓
Persistence & Privilege
always is false and autonomous invocation is allowed (platform default). The skill does not request permanent/overbroad privileges or modify agent/global configuration.
Assessment
This skill will send whatever text or URL you provide to AceToolz's API and return a hosted image URL. Do not use it to encode sensitive secrets or private data unless you're comfortable that a third party will receive and host that content. Be aware of the documented rate limit (30 requests/min) and that hosted QR images may be publicly accessible. If you need local-only QR generation or stricter privacy, consider a local tool/library instead of this skill.

Like a lobster shell, security has layers — review code before you run it.

QRvk97drhd7sp1y1at7bhxc10d0kx845ep3acetoolzvk974ksck9bghp2pp385dfwgc3n846y5cgenerate QRvk97drhd7sp1y1at7bhxc10d0kx845ep3generate qrvk974ksck9bghp2pp385dfwgc3n846y5clatestvk974ksck9bghp2pp385dfwgc3n846y5cmarketingvk974ksck9bghp2pp385dfwgc3n846y5cproductivityvk974ksck9bghp2pp385dfwgc3n846y5cqr-codevk974ksck9bghp2pp385dfwgc3n846y5cqr-generatorvk974ksck9bghp2pp385dfwgc3n846y5curlvk974ksck9bghp2pp385dfwgc3n846y5c

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📱 Clawdis

Comments