password-manager
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to perform administrative and data retrieval tasks through the 1Password CLI, including vault listing (
op vault list), item retrieval (op item get), and executing secondary scripts with injected environment variables (op run). - [EXTERNAL_DOWNLOADS]: The instructions guide the user to install the 1Password CLI using Homebrew (
brew install 1password-cli), which is a well-known and standard package management service. - [DATA_EXPOSURE]: While the skill's primary purpose is handling sensitive credentials, it incorporates several security guardrails, such as prohibiting the printing of secrets in responses, warning against writing secrets to version-controlled files, and forbidding the logging or storage of credential values in the workspace.
Audit Metadata