ZappushZappush
SkillsUse CasesBenchmarkCommunitySign In
      Back to Skills
      JayXu-D

      Safety Report

      My Generate Qr Code

      @JayXu-D

      生成二维码/条形码,支持文本、URL、WiFi 配置等内容,可自定义尺寸、颜色并指定保存路径

      75Downloads
      1Installs
      0Stars
      1Versions

      Security Analysis

      high confidence
      Clean0.08 risk

      The skill's code and instructions are consistent with a simple QR/barcode generator; it writes image files and may auto-install standard Python packages, but there are only minor implementation issues (no evidence of misdirection or unrelated privileges).

      Mar 2, 20262 files2 concerns
      Purpose & Capabilityok

      Name/description match the included agent.py and SKILL.md: the skill generates QR images, supports size/color, and saves to a path. It does not request unrelated credentials, binaries, or config paths.

      Instruction Scopenote

      SKILL.md instructs the agent to call generate_qr and to auto-install qrcode/Pillow if missing — the code does perform these actions. However, SKILL.md mentions filtering special characters and WiFi-format validation; the provided code does not implement explicit content filtering or WiFi-format validation, so behavior for those edge cases is not implemented as claimed.

      Install Mechanismnote

      There is no external install spec, but agent.py will attempt to run pip at runtime (sys.executable -m pip install ...) to fetch qrcode and pillow from PyPI. These are standard packages (no custom URLs), but the runtime pip install performs network downloads and writes to disk. Also, the import check uses '__import__("pillow")' while Pillow is imported as 'PIL', which may trigger unnecessary pip installs.

      Credentialsok

      The skill requests no credentials and no special env vars. It does read USERPROFILE to locate the Windows Desktop when save_path is omitted; that is reasonable for determining a default path but is undocumented in requires.env and could raise a KeyError on unusual environments.

      Persistence & Privilegeok

      The skill is not always-enabled, does not persist agent-wide changes, and only writes image files to the filesystem (user-specified paths). It does not modify other skills or system settings.

      Guidance

      This skill appears to do what it claims: generate and save QR images. Before installing or using it consider: (1) it will attempt to run pip at runtime to install 'qrcode' and 'pillow' from PyPI (network download and disk writes) — if you prefer, install those packages yourself ahead of time; (2) it will write files to the filesystem (default: Desktop) and will create directories if necessary — ensure the save path is trusted and writable; (3) there are minor implementation issues (it checks for 'pillow' via __import__('pillow') though Pillow is imported as PIL, and it claims to filter special characters / validate WiFi format but the code does not enforce these), so avoid feeding sensitive data until you review or test behaviour; (4) if you need stricter validation or want to avoid runtime package installs, review/modify the agent.py before use.

      Latest Release

      v1.0.0

      my-generate-qr-code 1.0.0 - 初始版本发布,支持生成二维码/条形码,可处理文本、URL、WiFi 配置信息。 - 可自定义二维码尺寸、颜色及保存路径(默认保存到桌面)。 - 具备错误处理:内容为空、路径无权限、缺少依赖库等常见场景。 - 依赖 qrcode 与 Pillow 库,未安装时自动尝试安装并给出提示。 - 支持识别和过滤特殊字符,确保二维码生成的有效性。

      Popular Skills

      self-improving-agent

      @pskoett · 1,456 stars

      Gog

      @steipete · 672 stars

      Tavily Web Search

      @arun-8687 · 620 stars

      Find Skills

      @JimLiuxinghai · 529 stars

      Proactive Agent

      @halthelobster · 426 stars

      Summarize

      @summarize · 415 stars

      Published by @JayXu-D on ClawHub

      Zappush© 2026 Zappush
      HomeGuaranteeSupport

      Something feels unusual? We want to help: [email protected]