Qr Password

What This Skill Does

The QR Password skill provides a secure, air-gapped bridge for transferring credentials between networked and non-networked environments. By utilizing QR codes as an optical channel, it eliminates the need for clipboard synchronization, USB drives, or network-based file transfers, which are common vectors for data exfiltration or malware infection. This skill is designed for high-security workflows where secret materials must never touch a storage medium or persistent memory. It includes strict handling protocols, requiring credentials to remain entirely volatile, enforcing automated deletion of images, and mandating that no plaintext password ever enters the chat logs.

Installation

To integrate this skill into your OpenClaw environment, execute the following command in your terminal: clawhub install openclaw/skills/skills/lifehackjohn/qr-password Ensure your system has Python 3 installed, along with the necessary libraries. You can verify dependencies by running: python3 -m pip install qrcode Pillow opencv-python-headless. The skill utilizes scripts located in skills/qr-password/scripts/ to handle the generation and parsing of QR codes safely.

Use Cases

• Secure Vault Transfer: Migrate credentials from an online vault to a standalone physical workstation.
• Air-Gapped Provisioning: Initialize systems that have no network interface by scanning credentials directly from the OpenClaw canvas.
• Ephemeral Authentication: Temporary credential entry without leaving traces in the system or browser history.
• Offline Recovery: Use the provided assets/qr-generator.html to create QR codes on an air-gapped machine, ensuring the data never leaves the local device.

Example Prompts

1. "Transfer my GitHub credentials to the air-gapped workstation using the QR password skill."
2. "Scan the QR code from the camera and use those credentials to log into the offline server dashboard."
3. "Generate a QR code for the Wi-Fi credentials of the guest network and display it for 30 seconds."

Tips & Limitations

• Ephemeral Nature: The skill is strictly designed for one-time use; always follow up with rm commands to ensure no files persist.
• Physical Security: Ensure no screen recorders or cameras are monitoring the display while the QR code is active.
• Data Size: QR codes have limited storage capacity; keep JSON payloads minimal to ensure high scanability.
• Safety First: Never attempt to bypass the redaction rules. The system is hard-coded to mask sensitive output to prevent accidental leaks.