skills.rest
AskTinNguyen
AskTinNguyenCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

1password-agent

Read secrets from the 1Password Vesper vault using a service account token.

1|Updated Jan 26, 2026
Search Tags:#secrets-management#1password#service-account#read-secrets#vesper-vault#autonomous-access
One-click install
npx skills add https://github.com/AskTinNguyen/vesper-team-skills --skill 1password-agent
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: 1password-agent
Source: https://github.com/AskTinNguyen/vesper-team-skills/tree/main/1password-agent
Command: npx skills add https://github.com/AskTinNguyen/vesper-team-skills --skill 1password-agent

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates autonomous access to secrets in the 1Password Vesper vault for agent processes by reading items via a dedicated service account.

Core Features & Use Cases

  • Automated secret retrieval for agent workflows without human intervention.
  • Use cases include scheduled tasks, heartbeat checks, and autonomous data-fetching where credentials are required.
  • Security-conscious design with token-based access and strict guardrails to prevent exposure.

Quick Start

Instruct the agent to read a secret from the Vesper vault using the service account token.

Frequently Asked Questions about 1password-agent

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate 1Password vault access for autonomous agent workflows?▼

Automate 1Password vault access by using a read-only service account token exposed as OP_SERVICE_ACCOUNT_TOKEN, allowing agents to fetch credentials autonomously without human intervention.

How do I read secrets from 1Password in a scheduled task without human intervention?▼

Read secrets from 1Password in scheduled tasks by utilizing the op read command with the op://Vesper/ path alongside a dedicated service account token to enable non-interactive credential retrieval.

What is a 1Password service account token used for in autonomous runs?▼

A 1Password service account token provides strict, read-only access to the Vesper vault, enabling autonomous runs and heartbeat checks to securely retrieve required credentials without exposing sensitive tokens.

Do I need a specific environment variable to fetch secrets from the Vesper vault?▼

Yes, fetching secrets from the Vesper vault requires the OP_SERVICE_ACCOUNT_TOKEN environment variable to be set, which authenticates the op read command for safe, non-interactive field retrieval.

What are the limitations of using a 1Password service account for secrets management?▼

The approach is limited to read-only access within the Vesper vault, meaning autonomous agents cannot create or modify secrets, and proper guardrails are required to prevent token exposure.

Related Skills

Explore More Software Engineering Skills→
lordmaculordmacu
6

1Password

Retrieve API keys, tokens, and passwords from 1Password via the op CLI.

Community
Intermediate
smith-hornsmith-horn
75

varlock

Mask environment variables and validate secrets via the Varlock CLI.

Official
Advanced
aaronjmarsaaronjmars
17

Heartbeat

Check open PRs, issues, and scheduled task logs for system health.

Community
Basic
heysuhasheysuhas
2

1password

Manage and inject 1Password CLI credentials into development workflows.

Community
Advanced