totpTOTP-based OTP verification for sensitive operations (env vars, gateway restarts, backup deletions, critical config changes). Uses otplib with window:2 (1 mi...
Install via ClawdBot CLI:
clawdbot install diegofcornejo/totpGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Generated Mar 21, 2026
A DevOps team uses the TOTP skill to secure access to environment variables and configuration files in production systems. When engineers need to view or modify .env files or restart critical gateways, they must provide a valid OTP from their authenticator app, ensuring only authorized personnel can perform these sensitive operations. This prevents accidental or malicious changes that could disrupt services.
A financial institution employs the TOTP skill to protect backup deletion processes for sensitive customer data. Before any backup can be deleted, administrators must verify their identity with a time-based OTP, adding an extra layer of security against unauthorized data loss. This helps comply with regulatory requirements and reduces the risk of insider threats.
A healthcare provider integrates the TOTP skill to safeguard critical configuration changes in patient management systems. When updating openclaw.json or other configs related to medical records, staff must provide an OTP, ensuring that only authenticated users can alter settings that affect data privacy and system integrity. This enhances HIPAA compliance and operational security.
An e-commerce platform uses the TOTP skill to secure external API key operations, such as generating or revoking keys for payment gateways. Before any API key change is made, users must verify with a TOTP, preventing unauthorized access that could lead to financial fraud or service disruptions. This adds robust authentication for high-stakes transactions.
A cloud service provider implements the TOTP skill to control access to critical infrastructure updates, like gateway restarts or system reconfigurations. Engineers must provide a valid OTP before executing these operations, reducing the risk of downtime from human error or malicious acts. This ensures high availability and security in multi-tenant environments.
Offer the TOTP skill as a premium security add-on for existing SaaS platforms, charging a monthly subscription fee per user or organization. This model targets businesses needing enhanced authentication for sensitive operations, generating recurring revenue while providing value through reduced security risks and compliance support.
Provide consulting services to help companies integrate the TOTP skill into their AI agents or systems, with one-time project fees or hourly rates. This model appeals to enterprises requiring custom setup and training, generating revenue from implementation work and ongoing maintenance contracts.
Distribute the TOTP skill as open-source software to build community adoption, then offer paid enterprise support, customization, and priority updates. This model attracts a broad user base while monetizing through support contracts and advanced features for larger organizations.
💬 Integration Tip
Ensure the TOTP_SECRET is securely stored in environment variables and never exposed in logs or code; integrate the verification step early in the agent's decision flow for critical operations to prevent unauthorized access.
Scored Jun 19, 2026
Control remote Windows machines via SSH. Use when executing commands on Windows, checking GPU status (nvidia-smi), running scripts, or managing remote Windows systems. Triggers on "run on Windows", "execute on remote", "check GPU", "nvidia-smi", "远程执行", "Windows 命令".
Perform reverse lookup of gTLD domains hosted on a specified nameserver with optional filters by TLD and domain prefix length.
Configure OpenClaw installations with optimized settings, channel setup, security hardening, and production recommendations.
Connect to remote desktops via RDP, VNC, and SSH X11 with secure tunneling and troubleshooting.
Essential curl commands for HTTP requests, API testing, and file transfers.
Deploy and manage Vercel projects. Use when deploying applications to Vercel, managing environment variables, checking deployment status, viewing logs, or performing Vercel operations. Supports production and preview deployments. Practical infrastructure operations - no "AI will build your app" magic.