1Password Web UI

This package appears to implement a legitimate 1Password UI integration, but take the following precautions before installing: - Review the backend code (reference/1password-backend.ts and scripts/op-helper.py) yourself — they implement the readSecret RPC and network calls to OP_CONNECT_HOST. Confirm you understand when secrets may be returned and to whom. - Ensure your gateway RPC interface is not reachable from untrusted networks. The skill’s security model depends on gateway RPCs being loopback-only or otherwise strongly access-controlled. - Explicitly verify the presence of the 1Password CLI ('op') on systems that will use CLI mode; for Docker/connect mode, ensure OP_CONNECT_HOST and OP_CONNECT_TOKEN are only set when you intend that mode. The registry metadata does not declare these requirements — treat them as required for functionality. - Because installation requires editing core server files and restarting the gateway, test in an isolated environment or backup the codebase before applying changes. - Restrict permissions on ~/clawd/config/1password-mappings.json (recommended 0600) and audit which skills are allowed to call 1password.* RPCs after installation. If you want to proceed but are unsure, ask the maintainer for an explanation of gateway access controls and a minimal install path (e.g., plugin registration) that avoids editing core server files.