1password
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes tmux to run op commands, ensuring that authentication sessions persist between the agent's individual command executions. It manages sessions using temporary sockets and provides examples for capturing and terminating sessions properly.
- [DATA_EXFILTRATION]: While the skill manages sensitive data, it includes explicit guardrails to prevent secrets from being leaked into logs or chat interfaces. It encourages the use of secure injection and execution patterns (op run, op inject) rather than writing secrets to disk.
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes data from 1Password vaults. However, this is inherent to the tool's function, and the skill includes instructions for the agent to maintain safety while handling retrieved content.
Audit Metadata