QR Password

Transfer credentials securely between networked and air-gapped devices using QR codes without exposing passwords or storing data persistently.

This skill appears coherent and implements an air-gapped QR credential flow. Before installing: (1) verify you trust the skill source and review the included scripts (they are small and local); (2) install Python deps in a controlled environment (pip will access the network to fetch packages); (3) ensure your agent/platform actually enforces the SKILL.md rules (deleting files, not logging secrets, auto-hiding canvas) because the skill's safety depends on runtime behavior; (4) avoid pasting QR images or decoded credentials into networked chats or services; and (5) if you need stronger assurance, run the scripts locally on an isolated device or inspect the pip packages' provenance before use.

Type: OpenClaw Skill Name: qr-password Version: 1.0.0 The OpenClaw AgentSkills skill bundle 'qr-password' is designed for air-gapped credential transfer via QR codes. The code and documentation consistently emphasize security best practices, including explicit instructions in `SKILL.md` for the agent to never log credentials, redact passwords, auto-clear canvas displays, delete QR images after use, and never store decoded credentials in files. The `assets/qr-generator.html` is self-contained and explicitly states it works offline without network connections. The Python scripts (`generate-qr.py`, `read-qr.py`, `qr-format.py`) use standard libraries for their stated purpose and do not exhibit any signs of data exfiltration, malicious execution, persistence, or obfuscation. While potential vulnerabilities could arise from an agent's failure to sanitize user-provided input when constructing commands for the skill (e.g., shell injection via file paths or JSON content), this represents a vulnerability in the agent's interaction layer rather than malicious intent within the skill itself. The skill's design and instructions are aligned with its stated purpose and prioritize secure handling of sensitive data.