Proton Pass CLI

Manage Proton Pass vaults, items (logins, SSH keys, aliases, notes), passwords, SSH agent integration, and secret injection into applications. Use when working with Proton Pass for password management, SSH key storage, secret injection (run commands with secrets, inject into templates), environment variable injection, or generating secure passwords. Supports vault/item CRUD, sharing, member management, SSH agent operations, TOTP generation, secret references (pass://vault/item/field), template injection, and command execution with secrets.

This SKILL.md appears to be a usage/install guide for a Proton Pass CLI and is internally consistent, but exercise caution: 1) The registry lists the source as unknown and provides no homepage — verify you obtained the skill from an official/trusted source before installing anything. 2) The install instructions include executing a remote script (curl | bash or install.ps1); prefer package-manager installs (Homebrew or official release assets) or review the install script contents before running. 3) The guide recommends putting credentials in environment variables or files and supports injecting secrets into arbitrary commands/templates — these are convenient but can leak secrets if scripts or agents run untrusted commands. 4) If you allow autonomous agent invocation, explicitly restrict the agent's ability to execute system commands or access sensitive files, and avoid granting broad runtime privileges. 5) If you need this skill, consider: obtaining the official binary from Proton's verified releases, auditing the install script, and using ephemeral/least-privilege automation tokens or file-based secret references rather than persistent plaintext env vars.

Type: OpenClaw Skill Name: proton-pass Version: 1.1.0 The skill bundle is classified as suspicious due to several high-risk capabilities, despite being aligned with its stated purpose as a password and secret manager. These include the installation method via `curl | bash` from an external URL (`proton.me`), the ability to import SSH private keys from `~/.ssh/` (documented in SKILL.md), and the `pass-cli run` and `pass-cli inject` commands which allow executing arbitrary commands with injected secrets or writing secrets to arbitrary files. While these are legitimate functionalities for a secret management tool, they expose a significant attack surface if the AI agent were to be compromised by a subsequent malicious prompt, and the skill itself does not lack these meaningful high-risk behaviors.