Password Generator

生成随机安全密码。长度12-16位随机(默认)，包含大小写字母、数字、符号。当用户要求生成密码、创建密码、随机密码时使用此技能。

This skill generates passwords as advertised, but I recommend caution before installing or using it as-is: - The script uses Python's random module (not cryptographically secure). Prefer the 'secrets' module (secrets.choice or secrets.token_urlsafe) for generating passwords. - It prints the password to stdout (may end up in logs) and always appends the password in plaintext to '/root/.openclaw/workspace/memory/passwords.md'. That path is hardcoded and may not exist or may expose secrets to other users/processes. Consider changing to a per-user secure location and setting restrictive file permissions (e.g., 600). - The SKILL.md refers to 'memory/passwords.md' (relative), but the code writes to an absolute /root path — verify and correct the intended storage location. - Consider adding an option to not save passwords, to encrypt stored entries, or to integrate with a secure password manager instead of writing plaintext files. If you still want to use this skill: run it in an isolated environment, inspect and modify the script to use the 'secrets' module, change the save location to a secure per-user path, and restrict file permissions before generating real secrets. If you cannot review or edit the script yourself, avoid installing it because it currently exposes generated passwords in plaintext.

Type: OpenClaw Skill Name: password-generator Version: 1.1.0 The skill accurately implements its stated purpose: generating a random password and saving it to a markdown file within the agent's designated memory directory (`/root/.openclaw/workspace/memory/passwords.md`). There are no signs of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts in SKILL.md. All file operations are confined to the agent's workspace and are consistent with the skill's functionality.