Password

Manage passwords with generation, strength checks, and storage. Use when creating credentials, auditing strength, rotating secrets, checking breaches.

This skill appears to be a local password utility and is internally consistent with that purpose. Before installing or using it: (1) inspect the remainder of scripts/script.sh (the provided content was truncated) to ensure it does not log or transmit generated or provided passwords to unexpected endpoints; (2) be aware it will create ~/.local/share/password-tool — check that it doesn't store plaintext secrets you don't want kept; (3) ensure openssl and common CLI tools (od, awk, sort, grep) are available on your system (SKILL.md only mentions curl); (4) breach checking uses Have I Been Pwned with k‑anonymity (only the first 5 chars of the SHA‑1 hash should be sent) — if you want to avoid any network calls, avoid the check-leak command. If you want higher assurance, run the script in a contained environment (VM/container) and review the full script source prior to use.

Type: OpenClaw Skill Name: password Version: 3.0.1 The 'password' skill is a legitimate utility for generating and analyzing passwords. It uses /dev/urandom for secure randomness and implements the Have I Been Pwned API using industry-standard k-anonymity (sending only the first 5 characters of a SHA-1 hash) in scripts/script.sh. No signs of data exfiltration, malicious execution, or prompt injection were found.