What problem does it solve?
This Skill provides a reliable, auditable workflow for managing and injecting sensitive credentials via the 1Password CLI, removing the need for plaintext environment variables or secrets stored in files.
Core Features & Use Cases
- Multiple authentication modes: supports service account tokens for headless automation, desktop app integration for interactive use, and Connect server for self-hosted setups.
- Safe secret handling: read secrets, inject templates, and run commands with secret environment variables using op read, op inject, and op run to minimize exposure.
- Execution resilience: guidance for using tmux to preserve desktop app authentication across non-interactive terminal calls and recommendations for CI-friendly service account flows.
- Use Case: Automate CI pipelines to inject database credentials at runtime using a service account token to avoid storing secrets in repository or plain env files.
Quick Start
Sign in with a service account token and run op read to retrieve and inject a secret into your application configuration.