1password
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
@membranehq/clipackage, which is the official command-line tool for the Membrane platform. It is installed via the standard npm registry to facilitate communication between the agent and 1Password. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data retrieved from 1Password vaults, creating a potential surface for indirect instructions to be processed by the agent.
- Ingestion points: Data enters the context via
membrane action runandmembrane requestcommands that fetch records, items, and metadata from 1Password. - Boundary markers: There are no specific delimiters or instruction-ignore warnings defined for the data returned from the 1Password API.
- Capability inventory: The skill possesses the ability to make network requests to the 1Password API and execute configured actions through the CLI.
- Sanitization: No explicit sanitization or filtering of the retrieved vault content is specified before the data is passed to the agent's context. This is a standard characteristic of integration tools that handle user-controlled external data.
Audit Metadata