Back to skill
Skillv3.0.0
ClawScan security
二维码生成器 · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignFeb 20, 2026, 12:31 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's code, instructions, and requirements are consistent with a simple QR-code generator that reads local images and writes a PNG to the temp directory; nothing in the package demands unrelated credentials, network access, or elevated privileges.
- Guidance
- This skill appears to do exactly what it says. Before installing or invoking it: (1) only provide image file paths you trust (the skill will read the file and may embed it in the QR), (2) be aware embedding whole images as base64 often creates very dense or unscannable QR codes—use an image URL when possible, (3) install the listed Python packages in a virtualenv to avoid system-wide package changes, and (4) review/scan the included agent.py if you require extra assurance (it currently performs only local file reading, base64 encoding, and writing to the temp directory).
Review Dimensions
- Purpose & Capability
- okName/description (QR code generation) matches the files and declared requirements: the skill only depends on qrcode and Pillow, reads specified local image paths, and writes QR images to the temp directory. There are no unexpected environment variables, binaries, or config paths requested.
- Instruction Scope
- noteSKILL.md and agent.py restrict file access to supplied image paths and temp dir, and the code returns an image path. Minor note: the implementation embeds local images as base64 data URLs into the QR payload when small enough, which can produce very dense/unscannable QR codes; SKILL.md mentions preferring URLs but does not enforce or warn about scannability. Also the SKILL.md prints full source — that's transparent but not a security issue.
- Install Mechanism
- okNo custom install spec; dependencies are standard Python packages (qrcode[pil], Pillow) listed in requirements.txt and suggested pip install in SKILL.md. No downloads from arbitrary URLs or archive extraction.
- Credentials
- okThe skill requests no environment variables or credentials. It legitimately reads local image files (as declared) and writes to the system temp directory; that access is proportional to its purpose. Users should be aware that any local file path they pass will be read.
- Persistence & Privilege
- okalways is false, no special persistence or system-wide config changes are requested, and the skill does not modify other skills or system settings.