1password

Manage and inject 1Password CLI secrets in Hermes workflows.

Updated Apr 27, 2026
One-click install
npx skills add https://github.com/AissenLiu/EasyHermes --skill 1password-aissenliu
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/AissenLiu/EasyHermes/tree/main/hermes-agent/optional-skills/security/1password
Command: npx skills add https://github.com/AissenLiu/EasyHermes --skill 1password-aissenliu

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Hermes users need a secure, manageable way to handle secrets during runtime without exposing credentials in env vars or config files.

Core Features & Use Cases

  • Securely manage and inject secrets using 1Password CLI in Hermes workflows.
  • Support both desktop app integration and service account token flows for automated environments.
  • Example: retrieve a db password from 1Password and inject into a Hermes configuration at runtime.

Quick Start

Sign in to the 1Password CLI and configure Hermes to read and inject secrets securely.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely inject secrets into Hermes runtime configurations?

To securely inject secrets into Hermes configurations, use the 1Password CLI to retrieve credentials at runtime, avoiding exposure in environment variables or config files. This skill covers reading and injecting secrets directly into workflows.

Can I use 1Password service accounts for Hermes automation?

Yes, you can use 1Password service accounts for Hermes automation. This skill supports both desktop app integration and service account token flows, allowing automated environments to retrieve secrets without manual sign-in.

Do I need tmux to manage 1Password CLI sessions in Hermes?

You need tmux to maintain stable Hermes terminal sessions when using the 1Password CLI. This skill provides tmux usage guidance to ensure your authenticated CLI sessions remain persistent during secret retrieval and injection workflows.

What is the best way to retrieve a database password from 1Password for Hermes?

The best way to retrieve a database password from 1Password for Hermes is using the 1Password CLI. After signing in, you can read the secret and inject it directly into your Hermes configuration at runtime securely.

How does 1Password CLI authentication work for Hermes workflows?

1Password CLI authentication for Hermes workflows works through either desktop app integration or service account tokens. This skill covers setup, sign-in choices, and reading secrets across both flows to manage credentials securely.

Why should I avoid storing credentials in environment variables for Hermes workflows?

Storing credentials in environment variables for Hermes workflows risks exposing sensitive secrets. Using the 1Password CLI to read and inject secrets at runtime provides a secure, manageable alternative without hardcoding credentials into config files.