totp-generate

Turn a TOTP shared secret into the code the service is asking for, right now, offline. Fixes the failures that make hand-rolled TOTP unreliable: leading zeros dropped, base32 padding computed before whitespace is stripped, digits/period from an otpauth:// URI ignored, codes handed over with two seconds of life left, and host clock drift misdiagnosed as a wrong secret.

When NOT to use

• Deciding where the secret lives (keychain, env, gitignored file), enrolling from a QR code, or handling backup codes → totp-secret-store.
• The seed is in 1Password, Bitwarden, Vault, or 2FAuth and you fetch the code over their CLI/API → totp-provider-api.
• Serving codes to MCP clients as a tool → totp-mcp-server.
• Detecting the challenge, filling the form, retrying → login-2fa-flow.
• Building TOTP verification into your own app (you are the server checking a user's code) — that is ordinary application code, not this skill.
• otpauth://hotp/… — counter-based, needs persistent counter state. Say so and stop.