← Back to Skills Marketplace
136
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install otpforge
Description
Manage TOTP/2FA codes locally (add/list/remove accounts, display current codes, and optional Tkinter GUI). Use when a user asks to generate a TOTP code, stor...
Usage Guidance
This skill appears to do exactly what it says: a local TOTP manager with CLI and Tkinter GUI and no network activity. Before installing, consider: (1) Secrets are stored in a plaintext JSON vault (default ~/.config/otpforge/secrets.json). Although the file is created with mode 600, it is not encrypted — if you need stronger protection, store the file on encrypted disk or modify the code to use OS keyring/encryption. (2) The GUI copies codes to the clipboard, which other apps may read; be mindful of clipboard exposure and clear it if needed. (3) You can override the vault location with OTPFORGE_STORE or --store for a one-off path. (4) Because this is bundled source code, you can (and should) review the files or run them in a sandbox before trusting with real 2FA secrets. There are no network calls or hidden endpoints in the code.
Capability Analysis
Type: OpenClaw Skill
Name: otpforge
Version: 0.1.0
The 'otpforge' skill is a standard TOTP (2FA) manager that stores secrets locally in a JSON file (~/.config/otpforge/secrets.json) with restricted file permissions (0o600). Analysis of cli.py, core.py, and gui.py shows no evidence of data exfiltration, network activity, or malicious execution; the code strictly performs local vault management and TOTP generation using standard cryptographic libraries.
Capability Assessment
Purpose & Capability
Name/description (manage TOTP codes locally, CLI + optional Tkinter GUI) matches the shipped code (cli.py, core.py, gui.py). The skill does not request unrelated credentials or binaries.
Instruction Scope
SKILL.md describes running the provided CLI and GUI and references an optional OTPFORGE_STORE env var and CLI --store flag; those behaviors are implemented in the code. The instructions do not ask the agent to read unrelated files, call external endpoints, or exfiltrate data.
Install Mechanism
No install spec is provided (instruction-only). Source files are bundled with the skill; there is no download-from-URL, package install, or execution of fetched code. This is low-risk from an install perspective.
Credentials
The skill requests no environment credentials. It supports an optional OTPFORGE_STORE env var to override the local vault path (not a secret). However, the vault is a plaintext JSON file (written with mode 0o600) — secrets are stored unencrypted on disk. No env vars like API keys, tokens, or passwords are requested.
Persistence & Privilege
The skill is not always-enabled, does not modify other skills or global agent config, and does not request elevated privileges. It writes a local file (the vault) in the user config directory, which is expected for this purpose.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install otpforge - After installation, invoke the skill by name or use
/otpforge - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
otpforge v0.1.0
- Initial release of otpforge for local TOTP/2FA management.
- Command-line interface (CLI) supports adding, listing, removing accounts, and displaying TOTP codes.
- Optional Tkinter GUI to view and refresh 2FA codes.
- Vault stored as JSON (default: ~/.config/otpforge/secrets.json) with flexible override options.
- Secrets can be securely added, updated, and masked when entered via GUI.
Metadata
Frequently Asked Questions
What is Otpforge?
Manage TOTP/2FA codes locally (add/list/remove accounts, display current codes, and optional Tkinter GUI). Use when a user asks to generate a TOTP code, stor... It is an AI Agent Skill for Claude Code / OpenClaw, with 136 downloads so far.
How do I install Otpforge?
Run "/install otpforge" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Otpforge free?
Yes, Otpforge is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Otpforge support?
Otpforge is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Otpforge?
It is built and maintained by ordsbot (@ordsbot); the current version is v0.1.0.
More Skills