QR Code Generator

Generate QR codes for text, URLs, WiFi connections, and business cards (vCard). Use when: (1) creating QR codes for websites or text, (2) generating WiFi con...

This skill appears coherent and limited to generating QR PNGs locally. Before installing or running: (1) be aware you will be asked to install the qrcode/Pillow package from PyPI (standard but subject to normal supply-chain risks) — consider reviewing the package or using a virtualenv; (2) generated WiFi QR codes embed plaintext SSIDs/passwords — avoid creating/sharing QR codes that expose sensitive network credentials; (3) the script saves to disk (defaults to ~/qrcode_output.png) and may overwrite files if you reuse the same path; (4) if you need higher assurance, inspect the included scripts (already provided) and run them in an isolated environment. Overall the skill is internally consistent and does what it claims.

Type: OpenClaw Skill Name: qr-code-gen Version: 1.0.0 The `qr-code-gen` skill bundle is classified as suspicious due to a local file write vulnerability. The `SKILL.md` documentation and the `scripts/qr-code.py` code explicitly allow users to specify an arbitrary `output_path` for saving generated QR code images. While this is a legitimate feature for a file-generating utility, it presents a risk: a malicious agent or user could instruct the skill to write to sensitive system locations (e.g., `/etc/cron.d/`, `~/.ssh/authorized_keys`), potentially leading to privilege escalation or persistence if the agent is not properly sandboxed or input is not sanitized. There is no evidence of intentional malicious behavior, data exfiltration, or remote execution within the provided files.