QR Password

---

name: qr-password description: Air-gapped credential bridge using QR codes. Use when transferring credentials between networked and air-gapped devices via QR codes. Triggers on: generating QR from credentials, reading QR codes containing credentials, air-gapped password transfer, credential QR codes, vault-to-QR, camera-to-credential.

---

QR Password — Air-Gapped Credential Bridge

Bidirectional credential transfer using QR codes as an optical channel. No secret touches a network.

Security Rules (MANDATORY)

Never log credentials to chat history or memory files

Redact passwords from all conversation output — show **** instead

Auto-clear canvas display after 30 seconds using timed canvas hide

QR images are ephemeral — delete after use with rm

Never store decoded credentials in any file

Mode A: Vault → QR (Outbound)

Generate a QR code from a credential for an air-gapped device to scan.

echo '{"username":"USER","password":"PASS","domain":"DOMAIN"}' | \
  python3 skills/qr-password/scripts/generate-qr.py /tmp/qr-out.png

Then display via canvas and auto-clear:

canvas present /tmp/qr-out.png
Wait 30s
canvas hide
rm /tmp/qr-out.png

When reporting to user, say "QR displayed" — never echo the password.

Mode B: Camera → Credential (Inbound)

Read a QR code from a camera image to extract credentials.

1. Capture image: nodes camera_snap (or accept user-provided image) 2. Decode:

python3 skills/qr-password/scripts/read-qr.py /path/to/image.png

3. Output is JSON: {"username":"...","password":"...","domain":"..."} 4. Use the credential (fill, copy, deliver) — never echo password to chat 5. Delete the image: rm /path/to/image.png

Offline QR Generator

For air-gapped devices, provide assets/qr-generator.html — a standalone offline HTML page that generates QR codes locally in-browser. No network required.

Dependencies

Python 3 with: qrcode, Pillow, opencv-python-headless

Install: python3 -m pip install --user qrcode Pillow opencv-python-headless