Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Qr Code Toolkit

v1.0.0

二维码/条形码全能工具集 - 支持生成、识别、美化、批量处理。Use when: (1) 需要生成二维码(URL/文本/WiFi/名片/支付), (2) 需要识别/解码二维码或条形码, (3) 需要美化二维码(添加logo/改变颜色/样式), (4) 需要批量生成或识别二维码, (5) 需要生成条形码(EAN/U...

0· 51·0 current·0 all-time
byLv Lancer@kaiyuelv

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for kaiyuelv/qr-barcode-toolkit.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Qr Code Toolkit" (kaiyuelv/qr-barcode-toolkit) from ClawHub.
Skill page: https://clawhub.ai/kaiyuelv/qr-barcode-toolkit
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install qr-barcode-toolkit

ClawHub CLI

Package manager switcher

npx clawhub@latest install qr-barcode-toolkit
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description align with the included Python scripts and requirements (qrcode, pillow, opencv, pyzbar, python-barcode). However the SKILL.md mentions zxing, camera realtime support, and additional scripts (batch_decode.py, verify_qr.py, api-reference.md) that are not present in the file manifest; these are documentation/code mismatches that reduce confidence in completeness.
Instruction Scope
Runtime instructions and CLI examples correspond to included scripts, and scripts operate only on local files (images, CSV/JSON). No network endpoints, credentials, or external exfiltration are referenced. But the SKILL.md claims features (real-time camera recognition) that are not implemented in the provided scripts. Also some scripts read user-provided CSV/JSON filenames directly and write files based on those values without sanitization (see batch_generate.py), introducing a potential arbitrary file write / path traversal risk.
Install Mechanism
There is no install spec; it's instruction-only with a requirements.txt listing well-known PyPI packages (qrcode, pillow, opencv-python, pyzbar, python-barcode, numpy). That is proportionate for the stated functionality.
Credentials
The skill requests no environment variables, no credentials, and touches only local files provided by the user. No excessive permissions or unrelated secrets are requested.
Persistence & Privilege
always is false and the skill does not request to persist or modify other skills or system-wide settings. It is user-invocable and can be called autonomously (platform default) — acceptable in this context.
What to consider before installing
This toolkit appears to implement the advertised QR/barcode features, but review before use: (1) Documentation mismatches — SKILL.md mentions zxing, camera realtime support, and extra scripts/files that are missing; confirm the feature set you need. (2) Fix runtime bugs before running: decode_qr.py references np without importing numpy; style_qr.change_colors assigns color strings to pixel tuples (likely to error). (3) Sanitize filenames in batch_generate.py and batch_from_json (user-controlled CSV/JSON 'filename' values can include '../' and cause path traversal or overwrite). (4) Run the scripts in a restricted/sandbox environment (non-privileged user) and inspect inputs before processing bulk data. (5) If you need camera/real-time decoding or the missing utilities, request the complete source or a signed release from the author. If you are not comfortable auditing/fixing these issues, do not run the batch scripts on sensitive systems or with untrusted input.

Like a lobster shell, security has layers — review code before you run it.

latestvk973w43hrzwxtfvb2qnatv3ff585h5pp
51downloads
0stars
1versions
Updated 2d ago
v1.0.0
MIT-0

QR Code Toolkit

二维码与条形码全能工具集,基于 Python + qrcode + opencv + zxing 实现。

核心能力

1. 二维码生成

  • 基础二维码(文本/URL)
  • WiFi 连接二维码
  • vCard 名片二维码
  • 邮箱/短信/电话二维码
  • 支付二维码模板

2. 二维码美化

  • 添加中心 Logo
  • 自定义颜色(前景/背景)
  • 圆角/点状/液态样式
  • 嵌入背景图片

3. 二维码识别

  • 图片解码(PNG/JPG/BMP)
  • 摄像头实时识别
  • 批量识别目录内图片
  • 支持损坏/模糊二维码修复

4. 条形码生成

  • Code128(通用)
  • EAN-13(商品条码)
  • UPC-A(北美商品码)
  • Code39 / ITF / Codabar

5. 批量处理

  • 批量生成二维码(CSV/Excel 数据源)
  • 批量识别并导出结果
  • 批量美化处理

快速开始

# 生成基础二维码
python3 scripts/generate_qr.py "https://example.com" --output qr.png

# 生成 WiFi 二维码
python3 scripts/generate_wifi.py --ssid MyWiFi --password secret123 --output wifi_qr.png

# 识别二维码
python3 scripts/decode_qr.py qr.png

# 美化二维码(加logo)
python3 scripts/style_qr.py qr.png --logo logo.png --output styled_qr.png

# 生成条形码
python3 scripts/generate_barcode.py "123456789012" --type ean13 --output barcode.png

# 批量生成
python3 scripts/batch_generate.py data.csv --output-dir ./qrs/

依赖安装

pip install -r requirements.txt

核心依赖:qrcode, pillow, opencv-python, pyzbar, python-barcode

脚本说明

脚本功能
generate_qr.py生成基础二维码
generate_wifi.py生成 WiFi 连接二维码
generate_vcard.py生成名片二维码
decode_qr.py识别/解码二维码
style_qr.py美化二维码
generate_barcode.py生成条形码
batch_generate.py批量生成
batch_decode.py批量识别
verify_qr.py二维码验证与质量检测

详细用法

参见 references/ 目录:

  • qr-standards.md - 二维码标准与容量说明
  • barcode-types.md - 条形码类型参考
  • api-reference.md - 脚本 API 参考

Comments

Loading comments...