Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Generate Qrcode

v1.1.1

Generate QR codes from URLs or text using a pre-built Python script with qrcode library

0· 384·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
The name/description state 'Generate QR codes' and the included agent.py implements exactly that using the qrcode library. No unrelated binaries, env vars, or services are requested.
Instruction Scope
SKILL.md instructs the agent to run the bundled Python script and nothing else; the instructions don't request reading other files, credentials, or sending data to external endpoints. The script only accepts input text/URL and writes a PNG to a user-specified path.
Install Mechanism
There is no install spec and only a small Python script is included — low-risk. The only runtime dependency is the qrcode Python package which must be pre-installed; there are no external downloads or extract steps.
Credentials
The skill declares no required environment variables, no credentials, and the code does not read environment variables or configuration files. Requested privileges are minimal and proportional to a QR generator.
!
Persistence & Privilege
The skill is marked always:true in metadata. That forces the skill to be included in every agent run and increases its blast radius beyond what a simple QR generator needs. This is an unnecessary privilege and should be justified or removed.
What to consider before installing
The included Python script is small and appears to only create QR-code PNGs — it looks functionally benign. However, the skill is configured with always:true, meaning it will be force-loaded into every agent session (a higher privilege than this utility needs). Before installing, consider: (1) remove or disable the always:true flag so it runs only when you invoke it; (2) verify the qrcode package you install comes from PyPI and is up-to-date; (3) be aware the script will write files to any output path you supply (don't pass sensitive system paths); and (4) because the owner and homepage are unknown, treat it as untrusted code: inspect it locally and, if possible, run it in a restricted environment or container.

Like a lobster shell, security has layers — review code before you run it.

latestvk97104f275rme9nvjww68dgcjd81wczq

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

📱 Clawdis

SKILL.md

QR Code Generator

Generate QR codes from URLs or text using a pre-built Python script.

Usage

IMPORTANT: Use the existing Python script, don't write inline code.

python3 ~/.openclaw/skills/generate-qrcode/agent.py "<URL or text>" <output_path>

Examples

Generate QR code for a URL:

python3 ~/.openclaw/skills/generate-qrcode/agent.py "https://www.baidu.com" ~/Desktop/baidu_qr.png

Generate QR code for text:

python3 ~/.openclaw/skills/generate-qrcode/agent.py "Hello World" ~/Desktop/hello.png

Output

  • PNG image file with QR code
  • Default size: 10x10 boxes per module
  • 4-box border

Requirements

  • Python 3.x
  • qrcode library (pre-installed)

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…