The Agent Skills Directory

[SAFE]: The skill is designed for secure secret management using the official 1Password CLI. It incorporates industry best practices, such as recommending 'op run' or 'op inject' to avoid writing sensitive data to disk.
[EXTERNAL_DOWNLOADS]: The skill references the installation of the '1password-cli' via Homebrew, which is the official and well-known distribution method for this tool.
[COMMAND_EXECUTION]: Employs 'tmux' and 'op' binaries to perform its primary function. The use of tmux is a functional requirement to maintain the shell's TTY state for authentication in multi-account environments.
[INDIRECT_PROMPT_INJECTION]: The skill processes output from the 'op' CLI, which could potentially contain untrusted data if an attacker controls the contents of a user's vault.
Ingestion points: Command output captured via tmux capture-pane in SKILL.md.
Boundary markers: None used when capturing and displaying tool output.
Capability inventory: Includes shell command execution via tmux send-keys and secret retrieval via op.
Sanitization: The skill does not sanitize the output from the 1Password CLI before processing it.

1password