← Back to Skills Marketplace
hostilespider

Secure Password Generator

by HostileSpider · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ Security Clean
116
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install secure-passgen
Description
Generate cryptographically secure passwords, passphrases, and API keys. Supports multiple formats and entropy calculation.
Usage Guidance
This skill runs locally using Python's secrets module and does not contact external services or request credentials — that's good. Before installing/using: (1) be aware the source is unknown and there's no homepage, so inspect the included script (you already have it). (2) The SKILL.md and the script have minor mismatches: --clipboard is documented but not implemented; entropy calculations in the script are approximate/inconsistent (check charset choices if you rely on the exact entropy values). (3) The default API-key prefix is "sk_" (common in some services for private keys); do not paste generated values into production services without understanding the context. If you plan to use this in sensitive contexts, run it locally, audit the code, and fix the documented/implementation discrepancies (symbol charset length, apikey entropy math, and either implement or remove the --clipboard feature).
Capability Analysis
Type: OpenClaw Skill Name: secure-passgen Version: 1.0.0 The skill bundle is a legitimate utility for generating cryptographically secure passwords and keys using Python's 'secrets' module. The code in 'scripts/passgen.py' is well-structured, lacks external dependencies, and contains no indicators of data exfiltration, malicious execution, or prompt injection. A minor documentation mismatch exists in 'SKILL.md' regarding a non-existent '--clipboard' flag, but this is a harmless inconsistency.
Capability Assessment
Purpose & Capability
Name/description match the included script: the skill generates passwords, passphrases, API keys, pins, hex, and base64 values and correctly requires only python3. There are no unexpected binaries or credentials requested.
Instruction Scope
SKILL.md's runtime instructions are limited to running the included script (no external endpoints or file system traversal). However, the docs mention options (--clipboard, --entropy semantics) that don't fully match the script: --clipboard is documented but not implemented; entropy calculations and charset sizes in the code are approximate/incorrect (e.g., symbol charset size hard-coded as 26 in one place, apikey entropy calculation uses charset=16 while token_hex(32) produces 64 hex characters). These are implementation/documentation bugs rather than evidence of exfiltration or scope creep.
Install Mechanism
No install spec (instruction-only + included script). Nothing is downloaded or installed automatically, which is low risk.
Credentials
No environment variables, credentials, or config paths are requested. The script runs locally and does not require any secrets or cloud keys.
Persistence & Privilege
Skill is not always-enabled and does not request permanent presence or modify other skills or system-wide settings. It does not perform privileged actions.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install secure-passgen
  3. After installation, invoke the skill by name or use /secure-passgen
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release — Generate passwords, passphrases, API keys
Metadata
Slug secure-passgen
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Secure Password Generator?

Generate cryptographically secure passwords, passphrases, and API keys. Supports multiple formats and entropy calculation. It is an AI Agent Skill for Claude Code / OpenClaw, with 116 downloads so far.

How do I install Secure Password Generator?

Run "/install secure-passgen" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Secure Password Generator free?

Yes, Secure Password Generator is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Secure Password Generator support?

Secure Password Generator is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Secure Password Generator?

It is built and maintained by HostileSpider (@hostilespider); the current version is v1.0.0.

💬 Comments