qrcode-remote

Generate and decode QR codes using CaoLiao QR Code API. Use when the user wants to create a QR code from text/URL, decode/read QR code content from an image,...

This skill generally does what it promises (generate and decode QR codes), but consider these points before installing: - Auto-install: The agent will run 'pip install -r requirements.txt' or 'npm install' automatically on first use. That modifies your environment and pulls packages from PyPI/npm. If you prefer, run those installs yourself in a controlled environment first. - Privacy: Decoding prefers local libraries but will upload images to the third-party API (https://api.2dcode.biz) when local decoding fails or when you choose API flows. Don't feed sensitive images you don't want transmitted to external servers. - File overwrite: Batch decode scripts write results back into the original CSV/XLSX files (and batch generate may write many image files). Back up user files before running batch operations. - Local execution risks: Scripts download arbitrary URLs and follow redirects. Only process inputs (URLs/files) you trust. If you still want to use the skill, test it first in an isolated environment, review requirements.txt/package.json, and run dependency installation manually so you can inspect what gets installed.

Type: OpenClaw Skill Name: qrcode-remote-skills Version: 1.0.0 The skill bundle provides legitimate QR code generation and decoding functionality using local libraries (zxingcpp, qrcode) and a remote API (api.2dcode.biz). The implementation includes both Python and Node.js scripts (e.g., scripts/batch_decode.py, scripts/batch_generate.js) that handle single and batch processing of images, CSVs, and Excel files. While the instructions in SKILL.md direct the agent to automatically install dependencies and the scripts send data to a third-party API for decoding (as stated in the documentation), there is no evidence of malicious intent, unauthorized data exfiltration, or hidden backdoors.