1password

Automate secure secret management via the 1Password CLI (op).

Updated Mar 24, 2026
One-click install
npx skills add https://github.com/1thirteeng3/greenmoire --skill 1password-1thirteeng3
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/1thirteeng3/greenmoire/tree/main/integrations/hermes-agent/optional-skills/security/1password
Command: npx skills add https://github.com/1thirteeng3/greenmoire --skill 1password-1thirteeng3

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Securing application secrets by replacing plaintext environment variables and unencrypted credentials with centralized, auditable secret management through the 1Password CLI.

Core Features & Use Cases

  • Install and configure 1Password CLI (op) and sign in
  • Read secrets with op read and inject into templates or commands
  • Run commands with secret env vars using op run, including service accounts and desktop app flows

Quick Start

Install the 1Password CLI, sign in, and begin reading or injecting secrets in your Hermes tasks.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I replace plaintext environment variables with centralized secrets management?

You can secure application secrets by replacing plaintext environment variables with centralized, auditable secret management through the 1Password CLI, which injects encrypted credentials directly into your workflows.

How do I inject secrets into commands using the 1Password CLI?

You inject secrets by using the 1Password CLI `op run` command to execute applications with secret environment variables, or use `op read` to fetch specific credentials for template population within Hermes workflows.

What authentication methods are required to use the 1Password CLI for secrets management?

Using the 1Password CLI for secrets management requires configuring an authentication method, either an `OP_SERVICE_ACCOUNT_TOKEN` for automated environments or desktop app sign-in for interactive sessions.

Can I use service accounts to automate secret retrieval in Hermes workflows?

Yes, you can automate secret retrieval in Hermes workflows using 1Password service accounts by configuring the `OP_SERVICE_ACCOUNT_TOKEN` environment variable to enable `op run` and `op read` operations without interactive sign-in.

What is the best way to manage credentials for automated Hermes task executions?

The best way to manage credentials for automated Hermes executions is using the 1Password CLI with service account tokens and optional tmux sessions, ensuring stable, auditable secret injection without plaintext environment variables.

Why use 1Password Connect instead of plaintext credentials for application secrets?

You use 1Password Connect and CLI flows instead of plaintext credentials to centralize application secrets, providing auditable access control and replacing unencrypted environment variables with secure, injected credentials.