1password
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to interact with the 1Password CLI and manages terminal sessions via
tmux. It creates temporary tmux sockets and sessions to handle interactive authentication and capture output without interfering with the primary shell environment. - [EXTERNAL_DOWNLOADS]: The skill references the installation of the official
1password-clivia the Homebrew package manager. This is a standard and recommended installation method for the 1Password CLI tool. - [DATA_EXPOSURE]: The skill is designed to manage and retrieve secrets from 1Password vaults. It includes mandatory guardrails instructing the agent to never paste secrets into logs, chat, or code, and prioritizes using
op runorop injectto handle secrets in-memory rather than writing them to persistent storage.
Audit Metadata