1password

Manage secrets securely with the 1Password CLI (op) in scripts and automation.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/adm-humanerd/drewgent --skill 1password-adm-humanerd
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/adm-humanerd/drewgent/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/adm-humanerd/drewgent --skill 1password-adm-humanerd

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Manage and access secrets securely using the 1Password CLI (op), eliminating plaintext exposure and manual secret handling.

Core Features & Use Cases

  • Install and configure the op CLI for secure secret management.
  • Sign in using a service account token or desktop app integration to read and inject secrets into commands and templates.
  • Use in automation to retrieve, inject, and pass secrets to applications, CI/CD, and scripts.

Quick Start

Sign in to 1Password using op and verify access to your vault.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I inject secrets from 1Password into automation scripts without exposing plaintext?

You can inject secrets into automation scripts by using the 1Password CLI to retrieve values dynamically and pass them directly into commands or templates. This prevents plaintext exposure and avoids storing credentials in files.

What is the best way to manage secrets in CI/CD pipelines using the op CLI?

The best way to manage secrets in CI/CD pipelines with the op CLI is to authenticate using a service account token. This allows automated workflows to securely retrieve and inject secrets without manual sign-in or desktop app integration.

Do I need a 1Password service account token to use the op CLI in automated workflows?

You need either a 1Password service account token or desktop app integration to authenticate the op CLI in automated workflows. A service account token is specifically designed for CI/CD and scripts where interactive sign-in is not possible.

Can I use 1Password desktop app integration instead of a service account to read secrets?

You can use 1Password desktop app integration to authenticate the op CLI instead of a service account. This allows you to read and inject secrets into local scripts and templates by leveraging your existing desktop session.

How does the 1Password CLI prevent data leakage when passing secrets to applications?

The 1Password CLI prevents data leakage by reading secrets directly from your vault and injecting them into application commands or templates at runtime. This eliminates the need to write plaintext credentials to disk or environment files.