← 返回 Skills 市场
429
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install qrcode-skills
功能描述
Generate and decode QR codes locally. Use when the user wants to create a QR code from text/URL, decode/read QR code content from an image, or asks about QR...
安全使用建议
This skill appears to do exactly what it says: local QR generation and decoding with both Python and Node.js script implementations. Before installing or allowing the agent to run it, consider: (1) the skill will attempt to auto-install Python/npm dependencies (network access and possible native builds); you may prefer to install dependencies manually so you can review them first; (2) batch-decode will, by default, write results back into the original CSV/XLSX file—make a backup if you need the originals preserved; (3) when decoding URLs the skill will download the remote image to a temp file (expected behavior); verify you trust the image sources; (4) if you have restricted environments, run the scripts in a sandbox or inspect the scripts themselves (they are included) before execution. The only minor oddity is a version mismatch between package.json and the registry metadata, which is likely benign but worth checking.
功能分析
Type: OpenClaw Skill
Name: qrcode-skills
Version: 1.0.1
The skill bundle provides legitimate QR code generation and decoding functionality but contains high-risk operational instructions and capabilities. Specifically, SKILL.md instructs the AI agent to automatically install dependencies via 'pip' or 'npm' without user confirmation, which is a risky practice that could be exploited for supply chain attacks. Additionally, the decoding scripts (scripts/decode.py and scripts/decode.js) perform network requests to download images from arbitrary user-provided URLs, which could facilitate Server-Side Request Forgery (SSRF) in restricted environments. While these behaviors are aligned with the stated purpose, they represent significant security risks.
能力评估
Purpose & Capability
Name/description (generate & decode QR codes) match the included scripts (generate/decode and batch variants in Python & Node). Dependencies listed (qrcode, zxingcpp, qr-scanner-wechat, etc.) are appropriate for the functions. Minor metadata inconsistency: package.json lists version 2.0.0 while registry metadata shows 1.0.1 (likely packaging/version drift, not malicious).
Instruction Scope
SKILL.md instructs the agent to run the included scripts and to download remote images only when given an image URL — that matches the code. Two noteworthy operational behaviors: (1) the skill auto-installs dependencies without prompting the user (pip install -r requirements.txt or npm install), and (2) batch decode will write results back into the original CSV/XLSX file by default (modifies user files). Both behaviors are documented in SKILL.md but merit user awareness.
Install Mechanism
There is no platform-level install spec; installation is performed at runtime by running pip/npm as described in SKILL.md. That is expected for an instruction+script skill, but it means packages will be fetched from PyPI/npm (network and native build steps may occur). The requirement zxingcpp (Python) may require native build tooling on some systems.
Credentials
The skill requests no environment variables, credentials, or config paths. It only performs file I/O, temporary downloads of user-provided image URLs, and dependency installs — all coherent with its purpose.
Persistence & Privilege
Skill flags are default (always: false, user-invocable: true, autonomous invocation allowed). The skill does not request permanent platform-wide privileges or modify other skills' configs. It will create temp files and may overwrite input files for batch decode (documented).
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install qrcode-skills - 安装完成后,直接呼叫该 Skill 的名称或使用
/qrcode-skills触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
* Removed the dependency on the CaoLiao QR Code API. All QR code generation and decoding processes are now implemented locally with **no network requests**.
* Documentation has been updated to clearly describe all commands, dependencies, and execution flows, with emphasis on **data privacy and security**.
* Only local QR code image generation is retained; **web-based QR code URL preview output has been removed**.
* Decoding now relies solely on **local tools**: `zxingcpp` (Python) or `qr-scanner-wechat` (Node.js). The previous API fallback has been removed.
* Batch operation workflows and parameter inheritance remain consistent with the previous logic, but **all processing is now performed locally**. When column selection is required, the interaction method is clearly explained to the user.
* If remote generation or decoding capabilities are required (e.g., obtaining a QR code URL), please use **qrcode-remote-skills**:
[https://github.com/caoliao/qrcode-remote-skills](https://github.com/caoliao/qrcode-remote-skills).
v1.0.0
qrcode-skills 1.0.0
- Initial release: Generate and decode QR codes using CaoLiao QR Code API, supporting Python and Node.js runtimes.
- Allows both single and batch QR code generation from text, URLs, or data files (Excel/CSV/TXT).
- Supports both web link preview and local file/image saving depending on user intent.
- Provides QR code decoding capabilities for local images, URLs, and batch files, with priority on local decoding and fallback to API.
- Features intelligent runtime/dep selection, automatic dependency check/install, and user-friendly output/reporting format.
- Handles multi-column/field selection for batch operations, asking user for clarification if needed.
元数据
常见问题
qrcode 是什么?
Generate and decode QR codes locally. Use when the user wants to create a QR code from text/URL, decode/read QR code content from an image, or asks about QR... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 429 次。
如何安装 qrcode?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install qrcode-skills」即可一键安装,无需额外配置。
qrcode 是免费的吗?
是的,qrcode 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
qrcode 支持哪些平台?
qrcode 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 qrcode?
由 hiNISAL(@hinisal)开发并维护,当前版本 v1.0.1。
推荐 Skills