generate-qr-code-natively — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited generate-qr-code-natively (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Create QR codes fully offline on the local machine (no third-party QR API calls).
qrencodeqrcode packageInstall options:
# Ubuntu/Debian
sudo apt-get update && sudo apt-get install -y qrencode
# Node.js
npm install qrcodeGenerate PNG and terminal QR directly from shell.
# Encode text into PNG
DATA="https://example.com/report?id=123"
qrencode -o qrcode.png -s 8 -m 2 "$DATA"
# Print QR in terminal (UTF-8 block mode)
qrencode -t UTF8 "$DATA"
# SVG output
qrencode -t SVG -o qrcode.svg "$DATA"import QRCode from 'qrcode';
const data = process.argv[2] || 'https://example.com';
async function main() {
await QRCode.toFile('qrcode.png', data, {
errorCorrectionLevel: 'M',
margin: 2,
width: 512
});
const svg = await QRCode.toString(data, { type: 'svg', margin: 2 });
await import('node:fs/promises').then(fs => fs.writeFile('qrcode.svg', svg));
const terminal = await QRCode.toString(data, { type: 'terminal' });
console.log(terminal);
console.log('Saved: qrcode.png, qrcode.svg');
}
main().catch(err => {
console.error('QR generation failed:', err.message);
process.exit(1);
});Run:
node generate-qr.js "https://example.com/invoice/abc"You are generating QR codes locally without calling external QR APIs.
Use Bash (qrencode) for quick CLI generation or Node.js (qrcode package) for programmatic control.
Return:
1) command/code used,
2) output filenames (png/svg),
3) brief validation note (e.g., "scan test recommended").
If dependency is missing, provide the install command and retry.M for general useqrencode: command not found → install qrencode via package managernpm install qrcode completed~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.