1password-cli
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the 1Password CLI binary directly from AgileBits' official cache domain (
cache.agilebits.com). This is a standard and expected method for installing the tool on Linux environments. - [COMMAND_EXECUTION]: The skill facilitates the execution of the
opcommand-line utility for managing secrets, including retrieving item details, reading secret references, and injecting credentials into other processes usingop runandop inject. - [SAFE]: The skill explicitly promotes security best practices, such as using service accounts for non-interactive environments, avoiding the storage of secrets in version control, and utilizing secret references instead of hardcoded values in configuration files.
Audit Metadata