Otp Challenger

UnscannedCK: Low Risk

2.7K downloads0 starsv1.0.67 versions

Description

Enable agents and skills to challenge users for fresh two-factor authentication proof (TOTP or YubiKey) before executing sensitive actions. Use this for identity verification in approval workflows - deploy commands, financial operations, data access, admin operations, and change control.

Changelog

Version 1.0.6 - Expanded required binaries and environment variable documentation in SKILL.md. - Added details for privileged features and OTP failure hooks. - Noted `qrencode` requirement for `generate-secret.sh`. - Improved clarity of configuration, environment variables, and installation sections.

2faotpsecuritytotp

Published Jan 31, 2026Updated Apr 29, 2026

Security Analysis

ClawHub:

Unscanned

Clawkeeper:

CK: Low Risk

Risk Score2.5 / 10

Minor signals found — likely safe but review recommended. Score is the sum of weighted findings below.

Findings

21 files analyzed

medium|+2.0 pts

Contains executable handler files (js/ts/sh/py)

low|+0.5 pts

21 files (typical skill has 1-3)

ClawHub scanned: Apr 29, 2026

Rescanned every 6 hours by Clawkeeper

Deploy Securely

Free to scan. Pro to deploy.