QR Code Generator

PassAudited by ClawScan on May 1, 2026.

Overview

This is a straightforward local QR-code generator, with the main cautions being that WiFi QR codes intentionally contain the WiFi password and setup requires an external Python package.

Before installing, confirm you are comfortable installing the qrcode/Pillow dependency and be careful with generated QR images that contain WiFi passwords or personal contact details.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI03: Identity and Privilege Abuse

What this means

Anyone who receives or scans the generated WiFi QR image may be able to connect to that WiFi network.

Why it was flagged

The script intentionally embeds the supplied WiFi password into the generated QR payload so that scanners can join the network.

Skill content

wifi_string = f"WIFI:T:{security};S:{ssid};P:{password};H:{hidden_flag};;"

Recommendation

Generate WiFi QR codes only for networks you intend to share, prefer guest networks when possible, and store or distribute the PNG carefully.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Users must install a dependency from their package ecosystem before use, so the dependency source and version affect safety and reproducibility.

Why it was flagged

The skill depends on an external QR-code package, but the registry requirements and install spec do not declare or pin that dependency.

Skill content

pip3 install qrcode[pil]
# or on Ubuntu/Debian:
sudo apt-get install python3-qrcode

Recommendation

Install dependencies from trusted package repositories and consider pinning versions in a controlled environment.