skills/alleneubank/claude-code/op-cli/Gen Agent Trust Hub

op-cli

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill guides the agent to use the 1Password CLI (op) for discovering vaults and retrieving secrets.
  • [COMMAND_EXECUTION]: Employs dynamic execution via eval "$(op signin)" to initialize session environment variables, following standard tool documentation.
  • [COMMAND_EXECUTION]: Uses a Python one-liner (python3 -c) to safely parse JSON metadata and extract field labels without exposing secret values.
  • [COMMAND_EXECUTION]: Integrates with external tools like wrangler and kubectl by piping secrets directly into their standard input, which prevents sensitive data from appearing in logs or shell history.
  • [COMMAND_EXECUTION]: Implements verification steps using wc -c to confirm the presence of data without revealing its content.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 05:07 PM
Security Audit — agent-trust-hub — op-cli