1password

Orchestrate 1Password CLI operations for sign-in, read, and inject workflows.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/Aevonix/colony-ai --skill 1password-aevonix
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/Aevonix/colony-ai/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/Aevonix/colony-ai --skill 1password-aevonix

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Enables secure management of secrets for CLI-driven workflows by leveraging the 1Password CLI to sign in, read, inject, and execute commands with secret references.

Core Features & Use Cases

  • Secure secret retrieval using op read from 1Password vaults.
  • Automated secret injection into templates and environment variables with op inject and op run.
  • Support for multiple authentication methods: service accounts, desktop app integration, and Connect servers.

Quick Start

Install the 1Password CLI, sign in with a suitable method, and begin reading secrets with op read.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate secret retrieval from 1Password vaults in CLI workflows?

Automate secret retrieval using the 1Password CLI to securely read vault items and pass them as environment variables to commands. This enables programmatic secret access without hardcoding sensitive values in scripts.

What's the best way to inject secrets into environment variables for automated deployments?

Injecting secrets into environment variables is best handled by orchestrating the 1Password CLI to populate templates and configurations automatically. This safely substitutes secret references during automated deployments.

Can I use 1Password service accounts for automated secret management without the desktop app?

1Password service accounts support automated secret management without the desktop app. They provide programmatic access for CI/CD pipelines and server environments where interactive sign-in is not possible.

Do I need tmux to automate 1Password CLI sign-in on desktop?

You need tmux for desktop app integration flows because it handles the terminal session required for interactive sign-in. Service accounts and Connect server modes do not require tmux for authentication.

How does secret injection work with configuration templates?

Secret injection works by parsing configuration templates for secret references and replacing them with actual vault values using the 1Password CLI. This automates configuration file generation while keeping secrets secure.