proton-pass-secrets
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Downloads and executes the official Proton Pass CLI installation script via
curl -fsSL https://proton.me/download/pass-cli/install.sh | bash. The source is the official domain of Proton, a well-known technology provider.\n- [EXTERNAL_DOWNLOADS]: Fetches the installation package and configuration from Proton's infrastructure during the preflight setup phase.\n- [COMMAND_EXECUTION]: Utilizespass-clito perform sensitive operations such as vault discovery, authentication, and secret retrieval. The skill specifically instructs the agent on how to usepass-cli runto securely inject secrets into child processes.\n- [PROMPT_INJECTION]: The skill handles data from external Proton Pass vaults, presenting a surface for indirect prompt injection.\n - Ingestion points: Vault names, item titles, and secret field values retrieved via
pass-cli.\n - Boundary markers: Employs single-quoting for shell commands and utilizes environment variables to isolate secret values from command logic.\n
- Capability inventory: Support for shell command execution (
pass-cli run), file writing (pass-cli inject), and network operations (viacurlexamples).\n - Sanitization: Recommends masking secrets in output streams and passing sensitive headers via stdin to avoid exposure in system process lists.
Audit Metadata