Secure Password Generator

Generate cryptographically secure passwords, passphrases, and API keys. Supports multiple formats and entropy calculation.

Security Scan

This is internally coherent: a local Python-based password generator that only requires python3 and contains no network calls or credential requests; there are small doc/code inconsistencies but no signs of malicious behavior.

Purpose & Capability

Name/description match the included script: the skill generates passwords, passphrases, API keys, pins, hex, and base64 values and correctly requires only python3. There are no unexpected binaries or credentials requested.

Instruction Scope

SKILL.md's runtime instructions are limited to running the included script (no external endpoints or file system traversal). However, the docs mention options (--clipboard, --entropy semantics) that don't fully match the script: --clipboard is documented but not implemented; entropy calculations and charset sizes in the code are approximate/incorrect (e.g., symbol charset size hard-coded as 26 in one place, apikey entropy calculation uses charset=16 while token_hex(32) produces 64 hex characters). These are implementation/documentation bugs rather than evidence of exfiltration or scope creep.

Install Mechanism

No install spec (instruction-only + included script). Nothing is downloaded or installed automatically, which is low risk.

Credentials

No environment variables, credentials, or config paths are requested. The script runs locally and does not require any secrets or cloud keys.

Persistence & Privilege

Skill is not always-enabled and does not request permanent presence or modify other skills or system-wide settings. It does not perform privileged actions.

Assessment

This skill runs locally using Python's secrets module and does not contact external services or request credentials — that's good. Before installing/using: (1) be aware the source is unknown and there's no homepage, so inspect the included script (you already have it). (2) The SKILL.md and the script have minor mismatches: --clipboard is documented but not implemented; entropy calculations in the script are approximate/inconsistent (check charset choices if you rely on the exact entropy values). (3) The default API-key prefix is "sk_" (common in some services for private keys); do not paste generated values into production services without understanding the context. If you plan to use this in sensitive contexts, run it locally, audit the code, and fix the documented/implementation discrepancies (symbol charset length, apikey entropy math, and either implement or remove the --clipboard feature).

Generate cryptographically secure passwords, passphrases, and API keys. Uses secrets module (CSPRNG) — not random.

Quick Start

# Generate a 20-char password
python3 {baseDir}/scripts/passgen.py

# Generate a passphrase
python3 {baseDir}/scripts/passgen.py --type passphrase --words 5

# Generate an API key
python3 {baseDir}/scripts/passgen.py --type apikey

# Generate 10 passwords at once
python3 {baseDir}/scripts/passgen.py --count 10

Types

Type	Example	Entropy
password	kX9#mP2$vL@nQ7!wR4	~128 bits
passphrase	correct-horse-battery-staple	~77 bits (5 words)
apikey	sk_a1b2c3d4e5f6...	~256 bits
pin	847291	~20 bits (6 digits)
hex	a3f7b2c1d9e8...	~256 bits (32 bytes)
base64	YWJjZGVmZ2hpams...	~256 bits

Options

• --type TYPE — Output type (default: password)
• --length N — Password length (default: 20)
• --words N — Passphrase word count (default: 5)
• --count N — How many to generate (default: 1)
• --no-symbols — Exclude symbols from passwords
• --no-numbers — Exclude numbers
• --separator CHAR — Passphrase separator (default: -)
• --entropy — Show entropy calculation
• --clipboard — Copy to clipboard (requires xclip/pbcopy)