Security audit
Security checks for vulnerabilities and agentic risk
This is a simple QR code generator that uses a disclosed third-party QR service, but users should avoid encoding secrets because the content is sent off-device.
Use this skill only for QR codes that do not contain secrets, credentials, private internal URLs, tokens, or sensitive personal/business data. The QR content is sent to api.qrserver.com to render the image, so users needing confidentiality should prefer a local/offline QR generator.
The skill advertises execution of a local Python script and use of an external QR API, which implies shell and network capability, but it does not declare any tool scope or permission boundary. This can cause the agent or user to invoke capabilities without clear authorization constraints, increasing the risk of unintended command execution or outbound data transfer.
The skill states that it uses qrserver.com to generate QR codes but does not clearly warn users that their supplied URL or text is transmitted to a third-party service. If users provide sensitive URLs, tokens, internal addresses, or private text, that data may be exposed externally without informed consent.
This tool is presented as a QR code generator, but it actually transmits the user-provided QR payload to a third-party service for rendering. That mismatch is security-relevant because users may reasonably assume sensitive text is processed locally and may unknowingly disclose internal URLs, tokens, or other confidential data.
The code sends arbitrary user-supplied QR content to an external API without warning, consent, or any confidentiality guidance. In a skill context, this is more dangerous because users may paste secrets, internal hostnames, login links, or business data into a seemingly local utility and silently leak them off-host.
The hardcoded external endpoint means all QR payloads are transmitted to a third-party service. Even over HTTPS, this creates a privacy and compliance risk because the remote provider receives the full encoded content and metadata associated with the request.
# Google Chart API (qrserver.com) - 全球最稳定的免费QR API
encoded = urllib.parse.quote(text)
url = (
f"https://api.qrserver.com/v1/create-qr-code/"
f"?size={size}x{size}"
f"&data={encoded}"
f"&color={fg_color}"
Using an external network service and a curl subprocess is unnecessary for the stated purpose because QR codes can be generated locally. This expands the attack surface by introducing data exfiltration risk, availability dependence on a third party, and trust in external tooling without clear justification.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
os.makedirs(os.path.dirname(output) or ".", exist_ok=True)
try:
cmd = ["curl", "-s", "--max-time", "15", "-L", "-o", output, url]
r = subprocess.run(cmd, capture_output=True, text=True, timeout=18)
if os.path.exists(output) and os.path.getsize(output) > 100:
return {"text": text, "file": os.path.abspath(output),
"size": size, "api": "qrserver.com", "status": "ok"}
The natural-language descriptions and user-visible messages are written only in Chinese, which can impose a specific language without any opt-in or alternative. Under the policy, language constraints should either offer user choice or be clearly justified as region-specific.
The tool sends user-supplied content to a third-party QR code generation service instead of generating the QR code locally. This creates a real confidentiality risk because any text encoded into the QR code is disclosed to an external service, which may log or retain the data.
A QR code generator minimally needs to transform text into an image, but this implementation also transmits the full payload to a third-party service. That extra capability exceeds the least-privilege expectation for the skill and can expose secrets, URLs, tokens, or personal data entered by users.
The code makes an outbound request to https://api.qrserver.com/ containing the full text being encoded in the query string. Even with TLS and certificate validation, the destination service still receives the data and may log the request, making this a genuine external data exposure concern.
SSL标准验证（certifi根证书）
"""
encoded_text = urllib.parse.quote(text)
url = f"https://api.qrserver.com/v1/create-qr-code/?size={size}x{size}&margin={margin}&format={format}&data={encoded_text}"
headers = {
'User-Agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36'
The code transmits user-provided text over the network to an external QR API without any user-facing warning, consent, or disclosure. Users may reasonably assume a local utility does not exfiltrate their content, so this hidden transmission increases the chance of accidental leakage of sensitive data.
The skill name, description, and usage documentation are entirely presented in Chinese, but there is no indication that the skill is intended only for a Chinese-speaking or China-specific context. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
No suspicious patterns detected.