pp-1password
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install its own CLI using
npx -y @mvanhorn/printing-press-libraryandgo install github.com/mvanhorn/printing-press-library/.... These sources are the official distribution channels for the vendor 'mvanhorn'. - [COMMAND_EXECUTION]: The skill facilitates the execution of the
1password-pp-clibinary. It includes capabilities to runop read,op inject, andop runworkflows through a gated planning layer. These operations are within the stated purpose of a 1Password integration skill. - [DATA_EXFILTRATION]: The skill includes a
--deliver webhook:<url>feature that can POST command output to a remote URL. While this allows data movement, it is a documented feature of the CLI tool intended for routing command results and requires explicit user-provided URLs.
Audit Metadata