Habilidades extension-qr-code

📦

extension-qr-code

Name: extension-qr-code
Author: caffeinelabs

v0.1.4 Revisión del contenido r1 Riesgo medio ⚙️ Comandos externos🌐 Acceso a red

Build a React QR Code Scanner

Camera-based QR scanning requires coordinated camera controls, decoding state, history, and error handling. This skill provides a React hook contract and an implementation pattern for a usable scanner interface.

Compatible con: Claude Codex Code(CC)

📊 72 Adecuado

Maintain this Skill? Claim it 📊 72 Adecuado

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "extension-qr-code" from https://skillstore.io/skills/caffeinelabs-extension-qr-code.md and its manifest at https://skillstore.io/api/skills/caffeinelabs-extension-qr-code/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/caffeinelabs-extension-qr-code.md Manifest firmado GET /api/skills/caffeinelabs-extension-qr-code/manifest Lockfile firmado GET /api/skills/caffeinelabs-extension-qr-code/lockfile

Pruébalo

Usando "extension-qr-code". Create a basic scanner for a React inventory page.

Resultado esperado:

A scanner view with explicit start and stop controls, a live camera preview, and timestamped scan results.

Usando "extension-qr-code". Make the scanner suitable for mobile check-in.

Resultado esperado:

A responsive check-in scanner with rear-camera startup, camera switching, permission feedback, and a clear recent-results list.

Usando "extension-qr-code". Improve scanner reliability for a production application.

Resultado esperado:

A production plan covering trusted decoder loading, scan timing, error recovery, camera cleanup, accessibility, and unsupported-browser behavior.

Auditoría de seguridad

Riesgo medio

v1 • 24/7/2026 Abrir el informe versionado

The four shell execution detections are false positives caused by Markdown backticks, and the hardcoded URL is a documentation link. The documented jsQRUrl option permits remote decoder loading, creating a supply-chain risk if an untrusted URL is used. No prompt injection or malicious intent was found.

Archivos escaneados

160

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Medio

SKILL.md:41-42

Configurable Remote Decoder Source

The configuration exposes jsQRUrl as the decoder library source. An untrusted value could load attacker-controlled script into the application.

The API comment explicitly describes remote library loading. The audited file does not include the package implementation or its URL validation.

Factores de riesgo

⚙️ Comandos externos (4)

SKILL.md:23 SKILL.md:25-86 SKILL.md:86-90 SKILL.md:90-157

🌐 Acceso a red (1)

SKILL.md:13

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/caffeinelabs-extension-qr-code/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/caffeinelabs-extension-qr-code/security.svg)](https://skillstore.io/skills/caffeinelabs-extension-qr-code?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/caffeinelabs-extension-qr-code?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/caffeinelabs-extension-qr-code/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/caffeinelabs-extension-qr-code.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

caffeinelabs. (2026). extension-qr-code security audit report (audit version 1) [Author version 0.1.4]. Skillstore. https://skillstore.io/skills/caffeinelabs-extension-qr-code/audits/1

Cita BibTeX

@techreport{caffeinelabs-caffeinelabs-extension-qr-code-2026,
  author = {caffeinelabs},
  title = {extension-qr-code security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/caffeinelabs-extension-qr-code/audits/1},
  note = {Author version 0.1.4}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "extension-qr-code security audit report (audit version 1)"
version: "0.1.4"
type: report
authors:
  - name: "caffeinelabs"
date-released: "2026-07-24"
url: "https://skillstore.io/skills/caffeinelabs-extension-qr-code/audits/1"
identifiers:
  - type: other
    value: "skillstore:caffeinelabs-extension-qr-code:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

100

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Prototype Product Scanning

Create a React scanner that captures QR identifiers and displays recent results.

Support Mobile Camera Switching

Build a mobile scanner with rear-camera defaults, camera switching, and clear control states.

Add Check-In Scanning

Integrate QR capture into an attendance workflow while handling permissions and scanner errors.

Prueba estos prompts

Create a Basic Scanner

Create a React QR scanner using useQRScanner. Include video and canvas refs, start and stop buttons, and a simple results list.

Add Mobile Controls

Build a responsive mobile QR scanner. Add permission errors, loading states, camera switching, clear history, and disabled control states.

Integrate a Workflow

Integrate QR scanning into [workflow]. Validate decoded values, retain [count] results, and stop the camera after a successful scan.

Design a Production Flow

Design QR scanning for [application]. Cover decoder source policy, privacy, accessibility, lifecycle cleanup, performance tuning, and browser fallback behavior.

Mejores prácticas

Start the camera only after explicit user action, and stop it when scanning ends or the component unmounts.
Treat decoded QR contents as untrusted input before navigation, storage, or workflow actions.
Test permission denial, unsupported browsers, mobile camera switching, and repeated scan handling.

Evitar

Do not automatically open URLs or execute actions from decoded QR contents.
Do not leave the camera active after the scanner is hidden or the workflow completes.
Do not load the decoder from an untrusted or unversioned remote source.

Preguntas frecuentes

Does this skill create QR codes?

No. It documents camera-based QR scanning and decoding.

Which React packages are required?

The skill targets the Caffeine AI QR code and camera packages.

Can users switch between cameras?

The hook exposes a switch action, but behavior depends on available cameras and browser support.

Can I control scanning frequency?

Yes. Configure scanInterval in milliseconds and balance responsiveness against device workload.

Does scanning require network access?

The decoder may load from a CDN. Use only trusted decoder sources approved for your application.

How should camera errors be handled?

Display the hook error, keep controls disabled during loading, and offer retry behavior when appropriate.

Detalles del desarrollador

Autor

caffeinelabs

Licencia

MIT

Versión del autor

v0.1.4

Revisión de Skillstore

Repositorio

https://github.com/caffeinelabs/skills/tree/56c60e7a2cd2a8abebe0cc93eec429339fff42e2/skills/extension-qr-code

Ref.

a39a91716eadede5f4cdefd78178fed4e837a128

Actualidad del mantenimiento

24/7/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📄 SKILL.md