skarbiec generate

Invocation#

skarbiec generate --length <N> [--lower] [--upper] [--digits] [--symbols]
# or
skarbiec generate --passphrase --words <N> [--separator <text>]

Purpose#

Generate a password or a word-list passphrase locally.

Required inputs and options#

• Password mode requires --length N and accepts character-class flags. Passphrase mode requires --passphrase and --words N; --separator defaults to a hyphen.

Output and state effects#

• Prints JSON containing password or passphrase. No generated value is stored automatically.

Refusals#

• Refuses non-numeric sizes, a zero length or word count, a password request with no usable character class, and a passphrase request larger than the available word pool. It does not consult the vault's policy section: the configured min_generated_length is decided on by policy-check-length, so a generated value shorter than the policy minimum is produced and must be checked rather than silently refused here.