password-manager

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to perform administrative and data retrieval tasks through the 1Password CLI, including vault listing (op vault list), item retrieval (op item get), and executing secondary scripts with injected environment variables (op run).
  • [EXTERNAL_DOWNLOADS]: The instructions guide the user to install the 1Password CLI using Homebrew (brew install 1password-cli), which is a well-known and standard package management service.
  • [DATA_EXPOSURE]: While the skill's primary purpose is handling sensitive credentials, it incorporates several security guardrails, such as prohibiting the printing of secrets in responses, warning against writing secrets to version-controlled files, and forbidding the logging or storage of credential values in the workspace.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 01:12 AM
Security Audit — agent-trust-hub — password-manager