1password
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [SAFE]: The skill serves as a knowledge base for the official 1Password CLI, referencing only trusted documentation from developer.1password.com.
- [COMMAND_EXECUTION]: Documents the use of op run and op inject for runtime secret resolution and configuration management.
- [DATA_EXFILTRATION]: Documents reading secrets from 1Password vaults. The skill includes explicit instructions for redaction and safe handling to prevent data exposure.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data from 1Password vaults.
- Ingestion points: op read, op run, and op inject (SKILL.md, references/commands-read.md).
- Boundary markers: None explicitly defined in the provided CLI documentation snippets.
- Capability inventory: Shell command execution via op run and file writes via op read or op inject (references/commands-run.md, references/commands-inject.md).
- Sanitization: Not explicitly implemented in the skill instructions; relies on the 1Password CLI internal security model.
Audit Metadata