{
 "schema_version": 1,
 "generated": "2026-10-26",
 "id": "sv-number-skills--complete-authenticator-second-factor",
 "repo": "sv-number/skills",
 "repo_url": "https://github.com/sv-number/skills",
 "repo_slug": "sv-number-skills",
 "title": "Compute a TOTP code locally for an account's second factor",
 "page_title": "How to compute a TOTP code locally for an account's second factor with Skills",
 "summary": "An agent stores a TOTP secret beside its API key and computes six-digit codes on the machine per RFC 6238.",
 "who": "An operator whose agent-run account asks for an authenticator app code after the phone step and who wants the agent to finish that step without a human.",
 "problem": "After the SMS code, many accounts ask for a time-based one-time password that the agent cannot produce from a phone number alone.",
 "outcome": "The agent computes the current six-digit TOTP code on the local machine and enters it, so the secret never leaves the machine.",
 "steps": [
  "Store the TOTP secret for the account in the agent environment next to SVN_API_KEY, not in the repo.",
  "Use a local RFC 6238 TOTP library or script to compute the six-digit code from the stored secret. (inferred, check the README)",
  "Enter the computed code within its validity window when the account asks for the authenticator step.",
  "Confirm the account accepts the code and record that the secret stayed on the machine."
 ],
 "agent_prompt": "Using the sv-number skill from the sv-number-skills repo, store the TOTP secret for <account name> in the local environment and compute the current six-digit code per RFC 6238. Expected output: a six-digit code accepted by the account. Verify that the secret was not sent to any remote service before you report the code.",
 "agents": [
  "claude-code",
  "codex"
 ],
 "difficulty": "Advanced",
 "time": "30 minutes",
 "basis": "readme",
 "caveat": "The README describes the TOTP step as part of this skill but does not show the code or library for it, so the exact implementation is left to you.",
 "category": "Software and DevOps",
 "tags": [
  "Software and DevOps"
 ],
 "lang": "python",
 "requirements": [
  "An SV Number account with a funded balance, since the README says there is no free tier",
  "An API key from your SV Number profile, exported as SVN_API_KEY",
  "curl and jq, plus Python or Node.js if you run the bundled scripts",
  "An agent runner that reads Agent Skills, such as Claude Code or Codex"
 ],
 "risk": "dual-use",
 "seen_in_the_wild": false,
 "mentioned_publicly": false,
 "risks": [
  {
   "tag": "credentials",
   "notice": "A TOTP secret is equivalent to the second factor itself, so anyone who reads it can log into the account; store it with the same care as a password."
  }
 ],
 "best": false,
 "score": 0.8,
 "evidence": [],
 "url": "https://dedupedai.com/use-cases/sv-number-skills/complete-authenticator-second-factor/",
 "md": "https://dedupedai.com/use-cases/sv-number-skills/complete-authenticator-second-factor/index.md",
 "disclaimer": "Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked \"Seen in the wild\", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email hello@dedupedai.com and we will look at it promptly.",
 "api": "https://dedupedai.com/api/v1/usecases/sv-number-skills--complete-authenticator-second-factor.json",
 "api_version": "v1"
}