1password

Retrieve and inject 1Password vault secrets into configuration files and environment variables.

1|Updated May 3, 2026
One-click install
npx skills add https://github.com/brikkoAI/brikko-studio --skill 1password-brikkoai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/brikkoAI/brikko-studio/tree/main/packages/core/skills/1password
Command: npx skills add https://github.com/brikkoAI/brikko-studio --skill 1password-brikkoai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill eliminates the risk of exposing sensitive secrets (passwords, API keys, credentials) when working with AI agents, removing the need to paste sensitive data into chat interfaces or log files where it could be compromised.

Core Features & Use Cases

  • Secure Vault Access: Retrieve secrets from 1Password vaults without exposing them to the LLM context.
  • Safe Secret Injection: Inject secrets directly into configuration files or environment variables for tool and application use.
  • Use Case: A developer needs to pass a database password to a deployment script without hardcoding it or sharing it in a chat with an AI agent; this Skill handles the secure retrieval and injection automatically.

Quick Start

Use the 1password skill to securely retrieve the database password from your 1Password vault and inject it into your deployment configuration file.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely retrieve secrets from a 1Password vault for an AI agent workflow?

Secure vault access is achieved by running the 1Password CLI (op) inside a dedicated tmux session, allowing the AI agent to retrieve passwords and API keys without exposing them to the LLM context.

How do I inject API keys into environment variables without exposing them in chat logs?

Safe secret injection works by using the 1Password CLI to fetch credentials and inject them directly into configuration files or environment variables, preventing sensitive data from appearing in chat interfaces or logging systems.

Do I need the 1Password desktop app enabled to use the op CLI with this Skill?

Yes, you need the 1Password CLI (op) installed and desktop app integration enabled. All op commands must be executed within a dedicated tmux session to avoid re-authentication prompts and ensure secure operation.

What is the best way to pass a database password to a deployment script without hardcoding it?

The best way to pass a database password securely is using the 1Password Skill to retrieve the credential from your vault and inject it directly into your deployment configuration file automatically.

Why does the 1Password CLI require a tmux session for secure secret retrieval?

A dedicated tmux session is required to avoid repeated re-authentication prompts during secure secret retrieval and to ensure the 1Password CLI operates securely when accessing vault credentials for developer and DevOps workflows.

Can I use this Skill to set up environment variables for application deployment without pasting credentials?

Yes, this Skill handles secure secret retrieval and environment variable setup for application deployment, eliminating the need to paste sensitive credentials into chat interfaces where they could be compromised.