1password

Manage 1Password CLI authentication and inject secrets into Hermes workflows.

Updated Mar 22, 2026
One-click install
npx skills add https://github.com/ChimeraFoundationa/Agentx --skill 1password-chimerafoundationa
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/ChimeraFoundationa/Agentx/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/ChimeraFoundationa/Agentx --skill 1password-chimerafoundationa

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Store and access secrets securely in Hermes workflows using the 1Password CLI, eliminating plaintext exposure and simplifying sign-in and secret retrieval.

Core Features & Use Cases

  • Manage authentication with op signin using service accounts, desktop app integration, or Connect server flows.
  • Read secrets with op read and inject them into templates or environment variables using op inject.
  • Run commands with secret env vars via op run while avoiding leakage in logs.
  • Hermes execution pattern supports non-interactive automation and tmux-based sessions for stable secret handling.

Quick Start

Sign in to 1Password using Hermes service account or desktop flow, then read and inject secrets with the op CLI.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely manage secrets in automated workflows using 1Password CLI?

You can securely manage secrets using the 1Password CLI by authenticating via service accounts or Connect server flows, then injecting credentials into templates or environment variables to eliminate plaintext exposure during automation.

Can I run commands with secret environment variables without leaking them in logs?

Yes, you can execute commands with secret environment variables using op run, which safely passes credentials to processes while preventing sensitive values from appearing in execution logs.

Does 1Password CLI support non-interactive authentication for CI/CD pipelines?

Yes, 1Password CLI supports non-interactive authentication through service accounts and Connect server flows, enabling stable secret handling in automated pipelines and tmux-based sessions without manual sign-in prompts.

What is the best way to inject secrets into configuration templates?

The best way to inject secrets into configuration templates is using op inject, which securely reads credentials from your vault and populates template variables without exposing plaintext data.

Do I need the 1Password desktop app to use op CLI for secret management?

No, the 1Password desktop app is not strictly required; you can authenticate using service accounts or Connect server flows for automation, though desktop app integration is supported for interactive contexts.