pp-1password

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install its own CLI using npx -y @mvanhorn/printing-press-library and go install github.com/mvanhorn/printing-press-library/.... These sources are the official distribution channels for the vendor 'mvanhorn'.
  • [COMMAND_EXECUTION]: The skill facilitates the execution of the 1password-pp-cli binary. It includes capabilities to run op read, op inject, and op run workflows through a gated planning layer. These operations are within the stated purpose of a 1Password integration skill.
  • [DATA_EXFILTRATION]: The skill includes a --deliver webhook:<url> feature that can POST command output to a remote URL. While this allows data movement, it is a documented feature of the CLI tool intended for routing command results and requires explicit user-provided URLs.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 03:32 AM
Security Audit — agent-trust-hub — pp-1password