ClawHub
Back to skill

Security audit

1password

Security checks across malware telemetry and agentic risk

Overview

This is a legitimate 1Password CLI helper, but its examples include unsafe ways to print or persist secrets without enough warning.

Install only if you want an agent to help operate 1Password CLI. Keep the app locked until needed, specify the exact account, vault, and item path, and avoid examples that print secrets, use --no-masking, or write keys/configs to disk unless you explicitly need that and can protect the files.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The examples include commands that write secret material to local files, such as exporting a private key or injecting secrets into configuration files, without warning that those files may persist on disk, inherit permissive permissions, or be captured by backups and logs. In a secrets-management skill, this is contextually understandable, but omitting handling guidance can lead users to expose sensitive credentials unintentionally.

Missing User Warnings

High
Confidence
98% confidence
Finding
`op run --no-masking -- printenv DB_PASSWORD` explicitly disables masking and prints a secret-bearing environment variable, which can expose the secret to terminal history, logs, screen recording, CI output, or other observers. In a 1Password CLI skill, demonstrating secret retrieval is expected, but showing the unsafe `--no-masking` form without a strong warning materially increases the chance of accidental disclosure.

Env Variable Harvesting

High
Category
Data Exfiltration
Content
## Run

- `export DB_PASSWORD="op://app-prod/db/password"`
- `op run --no-masking -- printenv DB_PASSWORD`
- `op run --env-file="./.env" -- printenv DB_PASSWORD`

## Inject
Confidence
96% confidence
Finding
printenv DB_PASSWORD

Env Variable Harvesting

High
Category
Data Exfiltration
Content
- `export DB_PASSWORD="op://app-prod/db/password"`
- `op run --no-masking -- printenv DB_PASSWORD`
- `op run --env-file="./.env" -- printenv DB_PASSWORD`

## Inject
Confidence
84% confidence
Finding
printenv DB_PASSWORD

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.