test-skill22131

Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/...

This skill appears to be a legitimate 1Password CLI helper and installs via Homebrew as expected. The main risk is operational: the instructions require creating a tmux session and capturing the terminal pane, which can include sensitive output. Before installing, confirm you (or the agent) will: 1) never transmit captured pane output to logs or external services, 2) implement redaction or strict filtering of captured output, and 3) review/declare any socket-related env vars (OPENCLAW_TMUX_SOCKET_DIR / CLAWDBOT_TMUX_SOCKET_DIR) used in your environment. If you want stronger guarantees, ask the skill author to remove automatic capture-pane usage or to add explicit redaction and handling rules in SKILL.md. If these safeguards cannot be enforced, treat outputs from this skill as high-sensitivity data and restrict its use.

Type: OpenClaw Skill Name: test-skill2123 Version: 1.0.0 The skill bundle is designed to integrate with the 1Password CLI (`op`), a legitimate secrets management tool. The `skill.md` provides instructions for installing `op` via `brew` and a detailed workflow for using it, including a `tmux` wrapper for `op` commands. While the instructions involve shell execution via `tmux send-keys`, these commands (`op signin`, `op whoami`, `op vault list`) are directly aligned with the stated purpose of the skill. Crucially, the skill includes explicit 'Guardrails' advising against pasting secrets into logs/chat and preferring secure methods like `op run`/`op inject`. There is no evidence of malicious intent such as data exfiltration, unauthorized execution, or persistence mechanisms; instead, the instructions aim to facilitate secure and reliable interaction with 1Password.