ClawHub
Back to skill

Security audit

1password.Old

Security checks across malware telemetry and agentic risk

Overview

This 1Password CLI skill is legitimate in purpose, but it includes copyable examples that can expose real secrets in terminal output or persistent local files.

Review before installing. Do not copy the examples that print secrets or use --no-masking with real credentials. Avoid writing secrets to disk unless necessary; when you must, use restrictive permissions, keep outputs out of source control and backups, and delete them promptly.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The examples show writing sensitive material to local files, including secret values and rendered configurations, without any warning about secure file permissions, cleanup, or avoiding persistence when unnecessary. In a secrets-management skill, normalizing secret material being written to disk can lead users to leave credentials in plaintext files that are later exposed via backups, logs, world-readable permissions, or source control.

Missing User Warnings

High
Confidence
98% confidence
Finding
`op run --no-masking -- printenv DB_PASSWORD` deliberately disables masking and prints the resolved secret to process output. This can expose credentials to terminal history capture, CI logs, shell session recording, shared consoles, and other monitoring systems, making compromise of the secret significantly easier.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.