Hash生成器

Hash生成器工具。支持MD5/SHA-1/SHA-256/SHA-512/BLAKE2b哈希、Base64编解码、UUID生成、HMAC签名。纯Python标准库，无需API Key。

Security Scan

The skill is internally coherent with its description (pure-stdlib hash, Base64, UUID, HMAC) and requests no credentials or installs, but there are minor implementation/documentation issues you should be aware of before using it for security-sensitive tasks.

Purpose & Capability

Name/description match the included code and SKILL.md: the tool implements MD5/SHA-1/SHA-256/SHA-512/BLAKE2b hashing, Base64 encode/decode, UUID generation, and an HMAC mode. All functionality uses only Python standard library modules, which is proportionate to the stated purpose.

Instruction Scope

SKILL.md instructs calling scripts/cn_hash_generator.py but the repository contains cn_hash_generator.py at the root (minor path mismatch). The HMAC 'hmac_sign' implementation does not use the hmac module and instead calls hashlib.new with the key as initial data, which is not a standard HMAC construction — this is a functional bug that could mislead users expecting a correct HMAC. Otherwise the instructions do not request additional files, env vars, or network communication.

Install Mechanism

No install spec (instruction-only skill) and no external downloads or package installs. The code is included directly and uses only stdlib — low installation risk.

Credentials

The skill requests no environment variables, credentials, or config paths. This is proportionate for a local hashing/encoding utility.

Persistence & Privilege

always is false and the skill is user-invocable with normal model invocation enabled. It does not request persistent system presence or modify other skills or system settings.

Assessment

This skill appears to do what it claims and does not request credentials or network access, so it's reasonable to run locally. Before using it with sensitive secrets: (1) be aware the HMAC implementation is nonstandard/incorrect — do not rely on it for cryptographic integrity until corrected (it should use Python's hmac module); (2) note the small path mismatch in SKILL.md (scripts/ vs root file) but that doesn't affect functionality; (3) avoid using MD5/SHA-1 for security-sensitive password storage — the README already warns this; and (4) if you need cryptographic correctness or auditability for production use, review/replace the HMAC code and consider a vetted crypto library or implementation.

多功能Hash工具，支持哈希生成、Base64编解码、UUID生成、HMAC签名。纯Python标准库实现，无需API Key。

功能

• 哈希生成：MD5、SHA-1、SHA-256、SHA-512、BLAKE2b
• Base64：编码和解码
• UUID：随机UUID生成
• HMAC签名：密钥+消息签名
• 纯标准库（hashlib + uuid + base64），零依赖

使用示例

计算"Hello World"的SHA256
生成一个UUID
Base64编码"你好"
HMAC签名 消息"test" 密钥"key"

技术实现

调用 scripts/cn_hash_generator.py，支持参数：

• --algo：算法选择（md5/sha1/sha256/sha512/blake2）
• --encode64：Base64编码
• --decode：Base64解码
• --uuid：生成UUID
• --hmac KEY：HMAC签名
• --upper：输出大写
• --count N：UUID生成数量

注意事项

• Hash是单向的，不可逆
• MD5和SHA-1不建议用于安全场景
• 密码存储建议使用bcrypt而非简单Hash