op-session
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill leverages the
op(1Password) command-line tool to authenticate and manage secrets. This is the primary and intended function of the skill. - [SAFE]: The skill stores 1Password session tokens in a local file (
~/.op-claude-session). It employs security best practices by usingumask 077to restrict file access to the owner only and by usinggrep/sedparsing instead ofsourceto prevent arbitrary code execution from the configuration file. - [SAFE]: The skill correctly handles both 1Password Token mode and App Integration mode, providing transparent session management for environments without a persistent TTY.
Audit Metadata