skills.rest
AlvaroBiano
AlvaroBianoCOMMUNITY
Explore all skills by this author →
GitHub

1password

Reads and injects secrets from 1Password CLI during Hermes automation workflows.

Updated May 2, 2026
Search Tags:#cli#tmux#secrets#secret-management#1password#op
One-click install
npx skills add https://github.com/AlvaroBiano/hermes-agent --skill 1password-alvarobiano
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/AlvaroBiano/hermes-agent/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/AlvaroBiano/hermes-agent --skill 1password-alvarobiano

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Centralizes secret management by enabling Hermes to use 1Password CLI (op) for secure retrieval, injection, and runtime usage of secrets, avoiding plaintext storage.

Core Features & Use Cases

  • Sign in to 1Password CLI and configure a service account flow for Hermes to access secrets securely.
  • Read secrets from op:// references and inject them into templates or environment variables for automation.
  • Run commands with secrets in a controlled manner, including desktop app integration or token-based authentication, while maintaining guardrails for security and auditability.
  • Use with Hermes to manage application credentials, API keys, and configuration secrets in CI/CD and local sessions.

Quick Start

Install the 1Password CLI (op), configure an authentication method (service account token, desktop app, or Connect), and verify access by running a simple secret read.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I retrieve secrets from 1Password CLI for automation workflows?▼

Retrieve 1Password CLI secrets by reading op:// references and injecting them into environment variables or templates. This avoids plaintext storage while securely managing application credentials and API keys during automation.

What authentication methods can I use to sign in to the 1Password CLI?▼

1Password CLI supports three authentication methods: service account tokens, desktop app integration, and Connect-based sign-ins. Choose the method that fits your Linux, macOS, or Windows automation environment.

Do I need the 1Password desktop app installed to manage secrets via CLI?▼

The 1Password desktop app is not strictly required. You can authenticate using a service account token or Connect, but desktop app integration is supported if you prefer that method for local sessions.

Can I inject 1Password secrets directly into CI/CD pipelines and tmux sessions?▼

Yes, inject op:// secret references into environment variables for CI/CD pipelines and local tmux sessions. This allows controlled runtime usage of secrets without exposing them in plaintext configuration files.

What is the best way to avoid plaintext secret storage in automated scripts?▼

Centralize secret management by using the 1Password CLI to read and inject secrets at runtime. This replaces plaintext storage by securely retrieving credentials, API keys, and configuration secrets during automation execution.

Does 1Password CLI work across Linux, macOS, and Windows environments?▼

Yes, 1Password CLI works across Linux, macOS, and Windows environments. Hermes can automate workflows on all these platforms using service accounts, desktop app integration, or Connect for authentication.

Related Skills

Explore More Software Engineering Skills→
Quill-AgentQuill-Agent
3

1password

Manage and inject secrets via 1Password CLI for CI/CD environments.

Community
Intermediate
smith-hornsmith-horn
75

varlock

Mask environment variables and validate secrets via the Varlock CLI.

Official
Advanced
act70255act70255

gitlab-ci-patterns

Automate GitLab CI/CD pipeline configuration with multi-stage workflows and caching.

Community
Advanced
systeminitsysteminit
530

swamp-vault

Store, retrieve, and list secrets across local encryption, AWS Secrets Manager, Azure Key Vault, and 1Password.

Official
Advanced