Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

萤火蓝二维码工具

v1.0.0

生成包含文本、URL或WiFi信息的二维码,支持自定义尺寸、颜色及保存路径,默认保存到桌面。

0· 119·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for lanxianghua/fireflylan-qr-code.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "萤火蓝二维码工具" (lanxianghua/fireflylan-qr-code) from ClawHub.
Skill page: https://clawhub.ai/lanxianghua/fireflylan-qr-code
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install fireflylan-qr-code

ClawHub CLI

Package manager switcher

npx clawhub@latest install fireflylan-qr-code
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description (生成二维码/条形码) matches the SKILL.md and the code. The code implements generate_qr(text,size,color,save_path) and saves an image file; no extraneous permissions, binaries, or credentials are requested.
Instruction Scope
SKILL.md instructs extracting content/size/color/save_path and calling generate_qr. The implementation follows that and only performs QR generation, image resizing, directory creation, and file writes. It does not read unrelated files or exfiltrate data. Note: the skill will attempt to install Python packages at runtime (network activity to PyPI).
Install Mechanism
There is no formal install spec, but scripts/agent.py runs install_dependencies() at import time and invokes pip via subprocess to install 'qrcode' and 'pillow'. These are well-known PyPI packages (expected for this task), but runtime pip installs cause network activity and execute code fetched from the public package index—this is a moderate operational risk to be aware of.
Credentials
The skill declares no required env vars or credentials. The code reads USERPROFILE (Windows) to compute a default desktop path, which is proportionate to its stated behavior. No secrets, tokens, or unrelated environment variables are requested or accessed.
Persistence & Privilege
always is false and the skill does not modify other skills or system-wide agent settings. It only writes image files to the filesystem (user-specified or desktop) and does not request persistent elevated privileges.
Assessment
This skill appears to do only QR generation and saving, but consider the following before installing: (1) The code auto-installs Python packages via pip at runtime which will contact PyPI—if you require strict offline or audited installs, install dependencies yourself and/or remove the auto-install; (2) The skill writes files to your filesystem (default: Desktop) — ensure you are comfortable with that path or specify a different save location with appropriate permissions; (3) The source and homepage are unknown — if you prefer, review the included scripts/agent.py locally or run the skill in an isolated environment (virtualenv/VM/container) before granting it use in a production agent; (4) If you have corporate policy about third-party packages, preinstall qrcode and Pillow from approved mirrors and disable the auto-install behavior.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a1cb7pqt7x1pn9bmeagw09583djyd
119downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

name: fireflylan-qr-code description: 生成二维码/条形码,支持文本、URL、WiFi 配置等内容,可自定义尺寸、颜色并指定保存路径 version: 1.0.0 author: lanxianghua permissions: 文件写入权限(用于保存二维码图片)

Generate QR Code Skill(生成二维码技能)

1. Description

当用户需要将文本、URL、WiFi 信息等转换为可视化二维码时,使用此技能生成二维码图片,并保存到指定路径(默认保存到桌面),支持自定义尺寸和颜色。

2. When to use

  • 用户说:“帮我把 https://openclaw.ai 生成二维码”
  • 用户说:“生成一个包含 WiFi 信息的二维码,名称:MyWiFi,密码:12345678”
  • 用户说:“生成黑色二维码,内容是‘Hello OpenClaw’,保存到 D 盘根目录”
  • 用户说:“帮我做一个 400px 大小的二维码,内容是我的手机号 13800138000”

3. How to use

  1. 从用户消息中提取核心参数:
    • 必选:生成内容(文本/URL/WiFi 信息,WiFi 格式需为“WIFI:S:名称;T:类型;P:密码;;”);
    • 可选:尺寸(默认 300px)、颜色(默认黑色)、保存路径(默认桌面);
  2. 若用户未指定可选参数,使用默认值;
  3. 调用 agent.py 中的 generate_qr 函数执行生成操作;
  4. 返回结果:告知用户二维码保存路径,若生成失败,说明具体原因(如路径无权限、内容为空)。

4. Implementation(代码关联说明)

  • 依赖库:qrcode(生成二维码)、Pillow(图片处理);
  • 核心函数:async def generate_qr(text: str, size: int = 300, color: str = "black", save_path: str = None);
  • 参数说明:
    • text:二维码内容(必选);
    • size:二维码尺寸(单位 px,默认 300);
    • color:填充颜色(默认 black,支持英文颜色名或十六进制色值,如 #FF0000);
    • save_path:保存路径(默认桌面,文件名:qr_code.png)。

5. Edge cases

  • 内容为空:回复“请提供需要生成二维码的内容(如文本、URL、WiFi 信息)”;
  • 保存路径无权限:回复“指定路径无写入权限,请更换保存路径(如桌面)”;
  • 未安装依赖库:自动尝试安装 qrcode 和 Pillow,若安装失败,提示用户手动执行“pip install qrcode pillow”;
  • 特殊字符内容:自动过滤无效字符,确保二维码可正常识别。

Comments

Loading comments...