← Back to Skills Marketplace
984
Downloads
2
Stars
5
Active Installs
2
Versions
Install in OpenClaw
/install qrcode
Description
Generate styled QR codes (SVG/PNG/JPG) from user input. Supports custom module color, background, dot shape and eye shape, and many output options.
Usage Guidance
This skill appears to do what it says: generate QR codes. Before installing/running: 1) Ensure Node is available on the agent host (SKILL.md expects 'node'); 2) Be aware 'npm install' will fetch qrcode and sharp from the npm registry—sharp may require native build tools or download prebuilt binaries (network access and build tools may be needed); 3) Confirm how WORKSPACE_ROOT is resolved in your environment (the script computes it as three directories up from the script location); outputs are strictly limited to the script's resolved workspace root and filenames are sanitized, but verify that matches your expected workspace; 4) Note that QR codes encode user-provided data — avoid generating/redistributing codes that point to malicious URLs or include secrets; 5) The registry metadata omission of the 'node' runtime is an administrative inconsistency — consider verifying the SKILL.md metadata and package.json before use. Overall this looks coherent and appropriate for its stated purpose.
Capability Analysis
Type: OpenClaw Skill
Name: qrcode
Version: 1.0.1
The OpenClaw AgentSkills 'qrcode' skill is classified as benign. Both the `SKILL.md` instructions and the `scripts/generate.mjs` code demonstrate a strong focus on security. The `SKILL.md` provides clear, non-malicious instructions for the agent, focusing on displaying output and user interaction, with no evidence of prompt injection. The `scripts/generate.mjs` script implements robust security measures, including comprehensive input validation, strict path traversal protection (forcing all outputs to the workspace root via `sanitizeOutputPath`), symlink attack prevention (`safeWriteFile`), resource limits to prevent DoS, and proper XML escaping to prevent SVG injection. There is no evidence of data exfiltration, unauthorized execution, or persistence mechanisms.
Capability Assessment
Purpose & Capability
Name/description match the code and dependencies (Node + qrcode + sharp). The included script implements QR generation and styling. Minor inconsistency: registry 'Requirements' reported no required binaries, while SKILL.md metadata correctly lists node and packages; this is an administrative mismatch but doesn't indicate malicious behavior.
Instruction Scope
Runtime instructions are scoped to generating and displaying QR image files, saving outputs to the workspace root, and offering regeneration. The SKILL.md does not instruct reading unrelated files, exfiltrating data, or accessing credentials. The agent is told to display generated files (expected).
Install Mechanism
No formal install spec in registry, but package.json exists and SKILL.md tells the user to run 'npm install'. Dependencies are from npm (qrcode, sharp). This is expected for the functionality, but sharp is a native module that may download prebuilt binaries or build from source during npm install—this is normal but increases install-time surface (network access, native build tools).
Credentials
The skill declares no environment variables, no credentials, and the code does not access external secrets. All required inputs are passed as command-line options. No disproportionate credential or config access was requested.
Persistence & Privilege
Skill does not request always:true and does not persist or modify other skills. It writes only to sanitized filenames in the resolved workspace root and includes defenses against symlink/TOCTOU attacks.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install qrcode - After installation, invoke the skill by name or use
/qrcode - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Enhance security and validation in QR code generation script.
v1.0.0
Initial publish — Generate styled QR codes (SVG/PNG/JPG) from user input. Supports custom module color, background, dot shape and eye shape, and many output options.
Metadata
Frequently Asked Questions
What is QRCode?
Generate styled QR codes (SVG/PNG/JPG) from user input. Supports custom module color, background, dot shape and eye shape, and many output options. It is an AI Agent Skill for Claude Code / OpenClaw, with 984 downloads so far.
How do I install QRCode?
Run "/install qrcode" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is QRCode free?
Yes, QRCode is completely free (open-source). You can download, install and use it at no cost.
Which platforms does QRCode support?
QRCode is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created QRCode?
It is built and maintained by HeXavi8 (@hexavi8); the current version is v1.0.1.
More Skills