1password

Pass

Audited by Gen Agent Trust Hub on Apr 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses tmux and mkdir to create and manage persistent shell sessions. This is a standard technical workaround to handle interactive authentication and session state for the 1Password CLI within the agent's non-interactive execution environment.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the official 1password-cli via Homebrew. As 1Password is a well-known and established security service, this is considered a safe and standard dependency installation.
  • [SAFE]: The skill includes robust guardrails that explicitly instruct the agent to avoid writing secrets to disk and to never paste sensitive information into chat or logs, favoring secure CLI patterns like op run or op inject.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 6, 2026, 11:29 PM
Security Audit — agent-trust-hub — 1password