Encoding Converter

Convert and verify data between Base64, URL encoding, HEX, MD5/SHA hashes, JWT payloads, HTML entities, and binary/octal/decimal/hex formats.

Security Scan

The skill's code, instructions, and file layout are coherent with its stated purpose (an offline encoding/decoding utility); it does not request credentials, perform network calls, or contain install-time downloads.

Purpose & Capability

The name/description match the actual code and examples. All implemented functions (Base64, URL encoding, HEX, hashes, JWT decode, HTML entities, radix conversions, random generators) are appropriate for an encoding/conversion utility and no unrelated dependencies or credentials are requested.

Instruction Scope

SKILL.md instructs import/usage of the local scripts.encoding_engine API and example scripts use only local functions. There are no instructions to read unrelated files, access environment variables, or send data to external endpoints.

Install Mechanism

There is no install spec or network download. The package is instruction-only for runtime use and includes pure-Python source and optional mention of PyJWT; requirements.txt contains no forced external packages.

Credentials

The skill requests no environment variables or credentials. Functions that accept keys (HMAC) take them as arguments; nothing in the skill tries to read secrets from the environment or config paths.

Persistence & Privilege

The skill does not request always:true and does not modify agent/system configuration. It has no persistent/backdoor behavior or autonomous privilege escalation signals.

Assessment

This appears to be a straightforward, local encoding/decoding utility. Before installing or running: 1) remember jwt_decode explicitly does NOT verify signatures — do not treat decoded JWT payloads as trusted without verification; 2) functions that compute HMACs/hashes accept secret data as parameters — avoid passing sensitive keys to third parties or untrusted contexts; 3) optional dependency PyJWT is only suggested for JWT encoding/verification, so if you need signature checks install a vetted PyJWT version; and 4) although no network or credential access is present, review any code you run in environments with sensitive data to ensure it meets your policies.

技能概述

多格式编码转换工具集。支持 Base64、URL 编码、HEX、MD5/SHA 哈希、JWT 解码、HTML 实体编码等常见编码格式的互转与校验。

何时使用

• 需要 Base64 编码/解码数据时
• 需要 URL encode/decode 文本时
• 需要计算文件或字符串的 MD5/SHA 哈希时
• 需要解码 JWT Token 查看 payload 时
• 需要 HTML 实体编码/解码时
• 需要进行进制转换（二进制/八进制/十进制/十六进制）时

使用方法

基础用法

from scripts.encoding_engine import EncodingConverter

ec = EncodingConverter()

# Base64 编解码
encoded = ec.base64_encode("Hello World")
decoded = ec.base64_decode(encoded)

# URL 编码
url_encoded = ec.url_encode("你好 世界")

# MD5 / SHA256 哈希
md5_hash = ec.md5("secret data")
sha256_hash = ec.sha256("secret data")

# JWT 解码（不验证签名）
payload = ec.jwt_decode("eyJhbGciOiJIUzI1NiIs...")

# HTML 实体编码
html = ec.html_encode("<div>Hello & 你好</div>")

# 进制转换
hex_val = ec.to_hex(255)      # -> "ff"
bin_val = ec.to_binary(255)   # -> "11111111"

文件结构

encoding-converter/
├── SKILL.md
├── README.md
├── requirements.txt
├── scripts/
│   └── encoding_engine.py     # 核心引擎
├── examples/
│   └── basic_usage.py          # 使用示例
└── tests/
    └── test_encoding.py        # 单元测试

依赖

• Python 内置: base64, urllib.parse, hashlib, html, json, binascii
• 可选: PyJWT 用于 JWT 编码

标签

encoding, decoding, base64, hash, jwt, developer-tools, security