1password-cli

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the 1Password CLI binary directly from AgileBits' official cache domain (cache.agilebits.com). This is a standard and expected method for installing the tool on Linux environments.
  • [COMMAND_EXECUTION]: The skill facilitates the execution of the op command-line utility for managing secrets, including retrieving item details, reading secret references, and injecting credentials into other processes using op run and op inject.
  • [SAFE]: The skill explicitly promotes security best practices, such as using service accounts for non-interactive environments, avoiding the storage of secrets in version control, and utilizing secret references instead of hardcoded values in configuration files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 04:18 PM
Security Audit — agent-trust-hub — 1password-cli