op-session
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill manages sensitive 1Password session tokens by storing them in a local cache file (
~/.op-claude-session). Security is maintained by usingumask 077to ensure the file is only readable and writable by the owner. - [COMMAND_EXECUTION]: The skill uses the
opCLI to authenticate and interact with 1Password. It provides a wrapper script (op-with-session.sh) that passes user-provided arguments directly to theopcommand to perform requested operations. - [SAFE_PRACTICE]: The scripts use a secure method to extract variables from the session file (using
grepandsed) instead of using thesourcecommand, which prevents the execution of arbitrary code if the session file were tampered with.
Audit Metadata