op-session

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE]: The skill manages sensitive 1Password session tokens by storing them in a local cache file (~/.op-claude-session). Security is maintained by using umask 077 to ensure the file is only readable and writable by the owner.
  • [COMMAND_EXECUTION]: The skill uses the op CLI to authenticate and interact with 1Password. It provides a wrapper script (op-with-session.sh) that passes user-provided arguments directly to the op command to perform requested operations.
  • [SAFE_PRACTICE]: The scripts use a secure method to extract variables from the session file (using grep and sed) instead of using the source command, which prevents the execution of arbitrary code if the session file were tampered with.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 01:44 PM
Security Audit — agent-trust-hub — op-session