1password

Manage secrets with the 1Password CLI for Hermes tasks.

2|Updated Apr 25, 2026
One-click install
npx skills add https://github.com/AlexiosBluffMara/mercury --skill 1password-alexiosbluffmara
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/AlexiosBluffMara/mercury/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/AlexiosBluffMara/mercury --skill 1password-alexiosbluffmara

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill provides a secure and centralized way to manage secrets using the 1Password CLI, enabling signing in, reading secret references, injecting secrets into templates, and running commands with sensitive data without exposing them in plaintext.

Core Features & Use Cases

  • Secure secret management via the 1Password CLI (op) for Hermes workflows.
  • Sign in, read, inject, and run commands with secret environment variables.
  • Use cases include configuring apps in CI/CD, local development, and ephemeral environments.

Quick Start

Install the 1Password CLI, sign in, and verify access to read and inject secrets.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage secrets securely using 1Password CLI in CI/CD pipelines?

Manage secrets securely in CI/CD by using the 1Password CLI to sign in, read secret references, and inject sensitive data into environment variables without exposing plaintext.

What is the best way to inject secrets into templates for local development?

The best way to inject secrets into templates is using the 1Password CLI to read secret references and populate configuration files securely during local development.

Do I need to install the 1Password CLI to read secret references in my workflows?

Yes, you need to install the 1Password CLI, sign in, and verify access to successfully read and inject secret references into your application workflows.

Can I run commands with secret environment variables without exposing them in plaintext?

You can run commands with secret environment variables securely by leveraging the 1Password CLI to fetch and inject secrets at runtime, preventing plaintext exposure.

Does 1Password CLI work with ephemeral environments for secure authentication?

1Password CLI works with ephemeral environments by enabling secure authentication, signing in, and injecting secrets dynamically into temporary infrastructure configurations.

What are the limitations of using 1Password CLI for secrets management?

Limitations of using 1Password CLI include requiring proper YAML frontmatter setup for Hermes tasks and adherence to documented operational guardrails to maintain secure secret access.