ClawHub

1password Local

v1.0.2

Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/...

⭐ 0· 146·2 current·2 all-time
by@zhaozewen0519·fork of @steipete/1password (1.0.1)
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the requested binary and install: the skill requires the 'op' binary and provides a Homebrew install for the 1password-cli formula. No unrelated credentials, binaries, or remote endpoints are requested.
ℹ
Instruction Scope
Instructions are largely within scope (install, sign-in, read/inject/run secrets). The SKILL.md mandates running all op commands inside a fresh tmux session and uses tmux capture-pane to collect output — this is coherent for isolating interactive auth, but capture-pane will include command output (which can contain secrets or auth responses). The skill does state guardrails (don’t paste secrets) but does not enforce where captured output may be routed, so operators should ensure the agent does not inadvertently expose captured pane contents to logs or chat.
✓
Install Mechanism
Install uses a Homebrew formula (1password-cli) which is appropriate and low-risk compared with arbitrary downloads. No extract-from-URL or custom binaries are present.
✓
Credentials
The skill requests no secrets or required environment variables. It references OP_ACCOUNT and an optional CLAWDBOT_TMUX_SOCKET_DIR for socket location, which are reasonable for operation but are not declared as required secrets.
✓
Persistence & Privilege
always is false and the skill does not request persistent/system-wide privileges or modify other skills. Autonomous invocation is allowed (platform default) but not excessive here.
Assessment
This skill appears coherent for using the 1Password CLI. Before installing, verify you trust the skill publisher and that your agent will handle captured command output safely: (1) ensure tmux socket directory permissions prevent other users from reading sockets/panes, (2) avoid sending captured pane content to chat or logs that others can access, and (3) confirm the Homebrew 1password-cli formula comes from the official source if brew will install it. If you need stronger guarantees, run op commands manually or in an isolated environment rather than granting the agent the ability to run them and capture pane output automatically.

Like a lobster shell, security has layers — review code before you run it.

latestvk972z0gdkn55n929at05rwyw2s837vna

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🔐 Clawdis
Binsop

Install

Install 1Password CLI (brew)
Bins: op
brew install 1password-cli

Comments