My Generate Qr Code

生成二维码/条形码，支持文本、URL、WiFi 配置等内容，可自定义尺寸、颜色并指定保存路径

Security Scan

The skill's code and instructions are consistent with a simple QR/barcode generator; it writes image files and may auto-install standard Python packages, but there are only minor implementation issues (no evidence of misdirection or unrelated privileges).

Purpose & Capability

Name/description match the included agent.py and SKILL.md: the skill generates QR images, supports size/color, and saves to a path. It does not request unrelated credentials, binaries, or config paths.

Instruction Scope

SKILL.md instructs the agent to call generate_qr and to auto-install qrcode/Pillow if missing — the code does perform these actions. However, SKILL.md mentions filtering special characters and WiFi-format validation; the provided code does not implement explicit content filtering or WiFi-format validation, so behavior for those edge cases is not implemented as claimed.

Install Mechanism

There is no external install spec, but agent.py will attempt to run pip at runtime (sys.executable -m pip install ...) to fetch qrcode and pillow from PyPI. These are standard packages (no custom URLs), but the runtime pip install performs network downloads and writes to disk. Also, the import check uses '__import__("pillow")' while Pillow is imported as 'PIL', which may trigger unnecessary pip installs.

Credentials

The skill requests no credentials and no special env vars. It does read USERPROFILE to locate the Windows Desktop when save_path is omitted; that is reasonable for determining a default path but is undocumented in requires.env and could raise a KeyError on unusual environments.

Persistence & Privilege

The skill is not always-enabled, does not persist agent-wide changes, and only writes image files to the filesystem (user-specified paths). It does not modify other skills or system settings.

Assessment

This skill appears to do what it claims: generate and save QR images. Before installing or using it consider: (1) it will attempt to run pip at runtime to install 'qrcode' and 'pillow' from PyPI (network download and disk writes) — if you prefer, install those packages yourself ahead of time; (2) it will write files to the filesystem (default: Desktop) and will create directories if necessary — ensure the save path is trusted and writable; (3) there are minor implementation issues (it checks for 'pillow' via __import__('pillow') though Pillow is imported as PIL, and it claims to filter special characters / validate WiFi format but the code does not enforce these), so avoid feeding sensitive data until you review or test behaviour; (4) if you need stricter validation or want to avoid runtime package installs, review/modify the agent.py before use.

Generate QR Code Skill（生成二维码技能）

1. Description

当用户需要将文本、URL、WiFi 信息等转换为可视化二维码时，使用此技能生成二维码图片，并保存到指定路径（默认保存到桌面），支持自定义尺寸和颜色。

2. When to use

• 用户说：“帮我把 https://openclaw.ai 生成二维码”
• 用户说：“生成一个包含 WiFi 信息的二维码，名称：MyWiFi，密码：12345678”
• 用户说：“生成黑色二维码，内容是‘Hello OpenClaw’，保存到 D 盘根目录”
• 用户说：“帮我做一个 400px 大小的二维码，内容是我的手机号 [phone]”

3. How to use

1. 从用户消息中提取核心参数：
   • 必选：生成内容（文本/URL/WiFi 信息，WiFi 格式需为“WIFI:S:名称;T:类型;P:密码;;”）；
   • 可选：尺寸（默认 300px）、颜色（默认黑色）、保存路径（默认桌面）；
2. 若用户未指定可选参数，使用默认值；
3. 调用 agent.py 中的 generate_qr 函数执行生成操作；
4. 返回结果：告知用户二维码保存路径，若生成失败，说明具体原因（如路径无权限、内容为空）。

4. Implementation（代码关联说明）

• 依赖库：qrcode（生成二维码）、Pillow（图片处理）；
• 核心函数：async def generate_qr(text: str, size: int = 300, color: str = "black", save_path: str = None)；
• 参数说明：
  • text：二维码内容（必选）；
  • size：二维码尺寸（单位 px，默认 300）；
  • color：填充颜色（默认 black，支持英文颜色名或十六进制色值，如 #FF0000）；
  • save_path：保存路径（默认桌面，文件名：qr_code.png）。

5. Edge cases

• 内容为空：回复“请提供需要生成二维码的内容（如文本、URL、WiFi 信息）”；
• 保存路径无权限：回复“指定路径无写入权限，请更换保存路径（如桌面）”；
• 未安装依赖库：自动尝试安装 qrcode 和 Pillow，若安装失败，提示用户手动执行“pip install qrcode pillow”；
• 特殊字符内容：自动过滤无效字符，确保二维码可正常识别。