1password 1.0.1.Zip

This skill appears to do what it says (set up and run the 1Password CLI) and installs the official brew formula, but there are operational details to review before installing: - The runtime instructions automate interactive sign-in inside tmux and explicitly capture tmux pane output. Captured output can include secrets if the agent or a user runs commands that reveal them. Only proceed if you trust the agent's handling of captured output and logs. - The SKILL.md references CLAWDBOT_TMUX_SOCKET_DIR (an agent-specific env var) but the skill doesn't declare or document required env vars—confirm what agent environment variables the skill expects and whether exposing or creating the socket directory is safe in your environment. - The guardrails (don’t paste secrets into chat, prefer op run/op inject) are good, but automated capture increases risk. Consider running 1Password sign-in manually instead of letting the skill drive it, or restrict the skill from autonomous invocation if your platform allows. - The install uses a Homebrew formula (low risk), but verify the brew formula source is official in your environment. If you want to proceed: limit the skill’s permissions, avoid letting it run autonomously for sensitive flows, and prefer manual sign-in for initial authorization. If you can provide or review additional logs of a dry run (what the agent would capture) I could reassess with higher confidence.