op-cli
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill guides the agent to use the 1Password CLI (
op) for discovering vaults and retrieving secrets. - [COMMAND_EXECUTION]: Employs dynamic execution via
eval "$(op signin)"to initialize session environment variables, following standard tool documentation. - [COMMAND_EXECUTION]: Uses a Python one-liner (
python3 -c) to safely parse JSON metadata and extract field labels without exposing secret values. - [COMMAND_EXECUTION]: Integrates with external tools like
wranglerandkubectlby piping secrets directly into their standard input, which prevents sensitive data from appearing in logs or shell history. - [COMMAND_EXECUTION]: Implements verification steps using
wc -cto confirm the presence of data without revealing its content.
Audit Metadata