← Back to Skills Marketplace
Skill 1
by
claudiodrusus
· GitHub ↗
· v1.0.0
626
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install skill-1
Description
Generate QR codes from text, URLs, WiFi credentials, vCards, or any data. Use when the user wants to create a QR code, share a link as a scannable code, gene...
Usage Guidance
This skill is coherent and implements a simple QR code generator. Before installing/running: (1) review the script if you want to confirm no changes to other files, (2) note that it will call pip to install qrcode[pil] the first time (which downloads from PyPI), so run it in a virtualenv/container if you want to avoid modifying system packages, and (3) ensure output paths given to the script are locations you intend to write to. If you need offline or pinned dependencies, consider pre-installing a vetted version of the qrcode package rather than allowing the runtime auto-install.
Capability Analysis
Type: OpenClaw Skill
Name: skill-1
Version: 1.0.0
The skill is classified as suspicious due to a path traversal vulnerability in `scripts/generate_qr.py`. The script uses `args.output` directly for file saving (`img.save(args.output)` and `open(args.output, 'w')`) without sanitizing the path. This allows an attacker to specify an output path containing `../` sequences, potentially writing files to arbitrary locations on the filesystem, which is a critical security flaw. While the `SKILL.md` is benign and the `pip install` via `subprocess` uses hardcoded, legitimate package names, the arbitrary file write vulnerability makes the skill risky.
Capability Assessment
Purpose & Capability
Name/description (QR code generation) align with the provided script and examples. The included Python script implements exactly the advertised features (text/URL, WiFi, vCard, PNG/SVG/ASCII). No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md instructs running the bundled script and shows concrete examples. The instructions do not request system files, other environment variables, or network endpoints beyond installing dependencies from PyPI at runtime (described in the README). There is no guidance to collect or transmit user data to third-party endpoints.
Install Mechanism
No install spec (instruction-only), but the script auto-installs the qrcode[pil] package via pip at runtime using subprocess. This is expected for a self-contained Python utility, but it performs a network download from PyPI when first run — consider this when running in restricted or production environments.
Credentials
The skill declares no required environment variables, credentials, or privileged config paths. The script runs locally and writes only the requested output file(s).
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and has no persistent installation step that would alter global agent settings. Agent autonomous invocation remains the platform default and is not excessive here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skill-1 - After installation, invoke the skill by name or use
/skill-1 - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
qr-gen 1.0.0
- Initial release for generating QR codes from text, URLs, WiFi credentials, vCards, and more.
- Supports output as PNG, SVG, or ASCII art.
- Command-line options for customizing size, border, error correction, and format.
- Automatically installs Python dependencies; no manual setup required.
Metadata
Frequently Asked Questions
What is Skill 1?
Generate QR codes from text, URLs, WiFi credentials, vCards, or any data. Use when the user wants to create a QR code, share a link as a scannable code, gene... It is an AI Agent Skill for Claude Code / OpenClaw, with 626 downloads so far.
How do I install Skill 1?
Run "/install skill-1" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Skill 1 free?
Yes, Skill 1 is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Skill 1 support?
Skill 1 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Skill 1?
It is built and maintained by claudiodrusus (@claudiodrusus); the current version is v1.0.0.
More Skills