← 返回 Skills 市场
136
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install otpforge
功能描述
Manage TOTP/2FA codes locally (add/list/remove accounts, display current codes, and optional Tkinter GUI). Use when a user asks to generate a TOTP code, stor...
安全使用建议
This skill appears to do exactly what it says: a local TOTP manager with CLI and Tkinter GUI and no network activity. Before installing, consider: (1) Secrets are stored in a plaintext JSON vault (default ~/.config/otpforge/secrets.json). Although the file is created with mode 600, it is not encrypted — if you need stronger protection, store the file on encrypted disk or modify the code to use OS keyring/encryption. (2) The GUI copies codes to the clipboard, which other apps may read; be mindful of clipboard exposure and clear it if needed. (3) You can override the vault location with OTPFORGE_STORE or --store for a one-off path. (4) Because this is bundled source code, you can (and should) review the files or run them in a sandbox before trusting with real 2FA secrets. There are no network calls or hidden endpoints in the code.
功能分析
Type: OpenClaw Skill
Name: otpforge
Version: 0.1.0
The 'otpforge' skill is a standard TOTP (2FA) manager that stores secrets locally in a JSON file (~/.config/otpforge/secrets.json) with restricted file permissions (0o600). Analysis of cli.py, core.py, and gui.py shows no evidence of data exfiltration, network activity, or malicious execution; the code strictly performs local vault management and TOTP generation using standard cryptographic libraries.
能力评估
Purpose & Capability
Name/description (manage TOTP codes locally, CLI + optional Tkinter GUI) matches the shipped code (cli.py, core.py, gui.py). The skill does not request unrelated credentials or binaries.
Instruction Scope
SKILL.md describes running the provided CLI and GUI and references an optional OTPFORGE_STORE env var and CLI --store flag; those behaviors are implemented in the code. The instructions do not ask the agent to read unrelated files, call external endpoints, or exfiltrate data.
Install Mechanism
No install spec is provided (instruction-only). Source files are bundled with the skill; there is no download-from-URL, package install, or execution of fetched code. This is low-risk from an install perspective.
Credentials
The skill requests no environment credentials. It supports an optional OTPFORGE_STORE env var to override the local vault path (not a secret). However, the vault is a plaintext JSON file (written with mode 0o600) — secrets are stored unencrypted on disk. No env vars like API keys, tokens, or passwords are requested.
Persistence & Privilege
The skill is not always-enabled, does not modify other skills or global agent config, and does not request elevated privileges. It writes a local file (the vault) in the user config directory, which is expected for this purpose.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install otpforge - 安装完成后，直接呼叫该 Skill 的名称或使用
/otpforge触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
otpforge v0.1.0
- Initial release of otpforge for local TOTP/2FA management.
- Command-line interface (CLI) supports adding, listing, removing accounts, and displaying TOTP codes.
- Optional Tkinter GUI to view and refresh 2FA codes.
- Vault stored as JSON (default: ~/.config/otpforge/secrets.json) with flexible override options.
- Secrets can be securely added, updated, and masked when entered via GUI.
元数据
常见问题
Otpforge 是什么？
Manage TOTP/2FA codes locally (add/list/remove accounts, display current codes, and optional Tkinter GUI). Use when a user asks to generate a TOTP code, stor... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 136 次。
如何安装 Otpforge？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install otpforge」即可一键安装，无需额外配置。
Otpforge 是免费的吗？
是的，Otpforge 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Otpforge 支持哪些平台？
Otpforge 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Otpforge？
由 ordsbot（@ordsbot）开发并维护，当前版本 v0.1.0。
推荐 Skills