Openssl

This skill is a focused, generally safe utility for generating cryptographically secure random secrets via `openssl rand`. It is well-suited for passwords, API keys, session tokens, and other secret values where high-entropy randomness is required, and it offers practical examples for common formats (hex, base64, URL-safe base64, alphanumeric). Main risks and limitations: - It depends on the OpenSSL CLI being available and correctly configured in the runtime environment. - Some examples use character filtering (`tr -dc ... | head -c N`), which introduces mild statistical bias; this is acceptable for passwords and tokens but is not ideal if one needs uniformly distributed key material for specific cryptographic algorithms. - Security still depends on users choosing sufficiently long outputs; while the doc advises at least 16 bytes (128 bits), shorter lengths would be weaker if allowed. Recommended scenarios: - Enable this skill when you need to reliably generate secrets (passwords, API keys, session/CSRF tokens, config secrets) and prefer a proven system CSPRNG over ad-hoc random generation. - Avoid using its filtered-output patterns for low-level cryptographic keys that require uniform, unfiltered binary key material; in those cases, use raw bytes or hex of the required size instead.