one-password
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Employs tmux to manage the lifecycle of 1Password CLI sessions, facilitating interactive authentication and state persistence.
- [DATA_EXFILTRATION]: Manages access to sensitive credentials with built-in protections; specifically, it instructs the agent to only output the length or presence of secrets rather than the values themselves.
- [PROMPT_INJECTION]: Ingests external data from 1Password items. 1. Ingestion points: op item get output in SKILL.md. 2. Boundary markers: None. 3. Capability inventory: Shell execution via tmux, secret management via op. 4. Sanitization: Explicit instructions to print only the shape or length of retrieved data.
Audit Metadata