← Back to Skills Marketplace
QR Password
by
lifehackjohn
· GitHub ↗
· v1.0.0
860
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install qr-password
Description
Transfer credentials securely between networked and air-gapped devices using QR codes without exposing passwords or storing data persistently.
Usage Guidance
This skill appears coherent and implements an air-gapped QR credential flow. Before installing: (1) verify you trust the skill source and review the included scripts (they are small and local); (2) install Python deps in a controlled environment (pip will access the network to fetch packages); (3) ensure your agent/platform actually enforces the SKILL.md rules (deleting files, not logging secrets, auto-hiding canvas) because the skill's safety depends on runtime behavior; (4) avoid pasting QR images or decoded credentials into networked chats or services; and (5) if you need stronger assurance, run the scripts locally on an isolated device or inspect the pip packages' provenance before use.
Capability Analysis
Type: OpenClaw Skill
Name: qr-password
Version: 1.0.0
The OpenClaw AgentSkills skill bundle 'qr-password' is designed for air-gapped credential transfer via QR codes. The code and documentation consistently emphasize security best practices, including explicit instructions in `SKILL.md` for the agent to never log credentials, redact passwords, auto-clear canvas displays, delete QR images after use, and never store decoded credentials in files. The `assets/qr-generator.html` is self-contained and explicitly states it works offline without network connections. The Python scripts (`generate-qr.py`, `read-qr.py`, `qr-format.py`) use standard libraries for their stated purpose and do not exhibit any signs of data exfiltration, malicious execution, persistence, or obfuscation. While potential vulnerabilities could arise from an agent's failure to sanitize user-provided input when constructing commands for the skill (e.g., shell injection via file paths or JSON content), this represents a vulnerability in the agent's interaction layer rather than malicious intent within the skill itself. The skill's design and instructions are aligned with its stated purpose and prioritize secure handling of sensitive data.
Capability Assessment
Purpose & Capability
Name/description match the included scripts and assets: generate-qr.py, read-qr.py, qr-format.py, and an offline HTML generator implement bidirectional QR transfer; no unrelated libraries, env vars, or host endpoints are requested.
Instruction Scope
SKILL.md stays on-topic (generate/display/delete QR images; decode images; use offline HTML). It mandates important runtime hygiene (redaction, ephemeral files, auto-hide). This is appropriate but enforces policies at the agent/runtime level — the skill cannot itself force deletion or prevent history logging if the agent/platform doesn't comply, so the user must ensure the agent honors those rules.
Install Mechanism
No install spec in the registry; code is provided directly. Declared Python dependencies (qrcode, Pillow, opencv-python-headless) are typical for this functionality. No downloads from arbitrary URLs or extract operations are present.
Credentials
The skill requests no environment variables, credentials, or config paths. The dependencies are proportional to generating/reading QR images. No unrelated secrets are requested.
Persistence & Privilege
always is false and the skill does not request persistent presence or modify other skills/configuration. It relies on transient files and the agent to remove them, which is normal for this use case.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install qr-password - After installation, invoke the skill by name or use
/qr-password - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: generate QR codes from credentials, read them back from images. Round-trip tested.
Metadata
Frequently Asked Questions
What is QR Password?
Transfer credentials securely between networked and air-gapped devices using QR codes without exposing passwords or storing data persistently. It is an AI Agent Skill for Claude Code / OpenClaw, with 860 downloads so far.
How do I install QR Password?
Run "/install qr-password" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is QR Password free?
Yes, QR Password is completely free (open-source). You can download, install and use it at no cost.
Which platforms does QR Password support?
QR Password is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created QR Password?
It is built and maintained by lifehackjohn (@lifehackjohn); the current version is v1.0.0.
More Skills