Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

AceToolz QR Code Generator

v1.0.1

Generate QR codes for any URL or text instantly using AceToolz. Returns a hosted image URL ready to share in chat.

0· 98·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for acetoolz/acetoolz-qr.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "AceToolz QR Code Generator" (acetoolz/acetoolz-qr) from ClawHub.
Skill page: https://clawhub.ai/acetoolz/acetoolz-qr
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install acetoolz-qr

ClawHub CLI

Package manager switcher

npx clawhub@latest install acetoolz-qr
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the runtime instructions: the skill calls AceToolz's QR generator API and returns hosted image URLs. Nothing requested (no env vars, no binaries) is disproportionate to this purpose.
Instruction Scope
SKILL.md directs the agent to run curl/Invoke-RestMethod to POST user-provided content to https://www.acetoolz.com/api/openclaw/qr-generator. It does not read local files or other environment variables. Note: user content is transmitted to a third-party service (AceToolz), which is expected for this skill but relevant for privacy.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest install risk. It relies on existing system tooling (curl/PowerShell) which is normal.
Credentials
No environment variables, secrets, or config paths are requested. The skill does not ask for unrelated credentials or elevated access.
Persistence & Privilege
always is false and autonomous invocation is allowed (platform default). The skill does not request permanent/overbroad privileges or modify agent/global configuration.
Assessment
This skill will send whatever text or URL you provide to AceToolz's API and return a hosted image URL. Do not use it to encode sensitive secrets or private data unless you're comfortable that a third party will receive and host that content. Be aware of the documented rate limit (30 requests/min) and that hosted QR images may be publicly accessible. If you need local-only QR generation or stricter privacy, consider a local tool/library instead of this skill.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

📱 Clawdis
acetoolzvk974ksck9bghp2pp385dfwgc3n846y5cgenerate qrvk974ksck9bghp2pp385dfwgc3n846y5clatestvk974ksck9bghp2pp385dfwgc3n846y5cmarketingvk974ksck9bghp2pp385dfwgc3n846y5cproductivityvk974ksck9bghp2pp385dfwgc3n846y5cqr-codevk974ksck9bghp2pp385dfwgc3n846y5cqr-generatorvk974ksck9bghp2pp385dfwgc3n846y5curlvk974ksck9bghp2pp385dfwgc3n846y5c
98downloads
0stars
2versions
Updated 3w ago
v1.0.1
MIT-0

AceToolz QR Code Generator

Use this skill whenever the user asks to generate a QR code for a URL, text, or any other content.

How to Use

Use exec to call the AceToolz API. Detect the OS and run the appropriate command:

Windows (PowerShell):

Invoke-RestMethod -Uri "https://www.acetoolz.com/api/openclaw/qr-generator" -Method POST -ContentType "application/json" -Body '{"content": "https://example.com", "size": 300}'

macOS / Linux (curl):

curl -s -X POST https://www.acetoolz.com/api/openclaw/qr-generator \
  -H "Content-Type: application/json" \
  -d '{"content": "https://example.com", "size": 300}'

Adjust the content and size parameters based on the user's request.

Parameters

FieldTypeRequiredDescription
contentstringYesThe URL or text to encode in the QR code (max 2,000 chars)
sizenumberNoQR image size in pixels (100–500, default 300)

Response

The API returns two image fields:

  • qr_image_url — a direct hosted image URL (share this in chat — works in WhatsApp, Telegram, Slack, etc.)
  • qr_data_url — a base64-encoded PNG data URL (for platforms that support it)

Presenting Results

Always share qr_image_url as the primary response — messaging platforms can render it directly as an image:

Here is your QR code for: https://example.com [image: qr_image_url]

Powered by AceToolz

Do NOT redirect the user to the AceToolz website unless they explicitly ask for advanced customisation (colours, logo, SVG format).

Error Handling

  • If content is missing, ask the user what they want encoded in the QR code.
  • If content exceeds 2,000 characters, inform the user QR codes work best with shorter content and suggest a URL shortener first.
  • If the API returns 429, the limit is 30 requests/minute.
  • If the API is unreachable, tell the user and suggest visiting https://www.acetoolz.com/generate/tools/qr-generator directly.

Comments

Loading comments...