360 Secure SkillHub
360 安全技能中心

Otpforge

该 Skill 通过本地 JSON 保险库管理 TOTP 密钥,支持添加、列出、删除账户及显示当前验证码,可用命令行或 Tkinter 图形界面操作,默认保存在用户配置目录并允许自定义存储路径。

ordsbot
ordsbot
热度 42.89
最近更新 2026-05-11 17:35:11
分类:安全依赖:代码执行 / 读写文件应用场景:工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add otpforge
Metadata
name
otpforge
description
Manage TOTP/2FA codes locally (add/list/remove accounts, display current codes, and optional Tkinter GUI). Use when a user asks to generate a TOTP code, store a new base32 secret, list 2FA accounts, or manage a local OTP vault from the command line.

OtpForge

Use the bundled cli.py and core.py to manage a local JSON vault of TOTP secrets and to generate current codes.

Quickstart (CLI)

  • List accounts:
    • python3 cli.py list
    • python3 cli.py list --codes
  • Add/update an account:
    • python3 cli.py add <label> <base32-secret> --issuer <issuer> --digits 6 --period 30
  • Get one code:
    • python3 cli.py code <label>
  • Remove:
    • python3 cli.py remove <label>

Vault location

  • Default: ~/.config/otpforge/secrets.json
  • Override with env var: OTPFORGE_STORE=/path/to/secrets.json
  • Override with CLI flag (preferred for one-offs): python3 cli.py --store /path/to/secrets.json ...

GUI

  • Launch: python3 cli.py gui

Notes:

  • The GUI is a simple Tkinter app that refreshes codes every second.
  • Secrets are masked in the input field.