op-session

Pass

Audited by Gen Agent Trust Hub on Apr 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill leverages the op (1Password) command-line tool to authenticate and manage secrets. This is the primary and intended function of the skill.
  • [SAFE]: The skill stores 1Password session tokens in a local file (~/.op-claude-session). It employs security best practices by using umask 077 to restrict file access to the owner only and by using grep/sed parsing instead of source to prevent arbitrary code execution from the configuration file.
  • [SAFE]: The skill correctly handles both 1Password Token mode and App Integration mode, providing transparent session management for environments without a persistent TTY.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 20, 2026, 07:24 PM
Security Audit — agent-trust-hub — op-session