1password

Read, inject, and run secrets via the 1Password CLI in Hermes tasks.

Updated Apr 23, 2026
One-click install
npx skills add https://github.com/Chris-Chai-Minjae/hermes-agent-r1-bridge --skill 1password-chris-chai-minjae
Or copy as Structured Prompt for Agentβ–Ό
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/Chris-Chai-Minjae/hermes-agent-r1-bridge/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/Chris-Chai-Minjae/hermes-agent-r1-bridge --skill 1password-chris-chai-minjae

SYSTEM DOCUMENTATION & REQUIREMENTS

πŸ’‘ This Skill includes references (resource) components.

What problem does it solve?

This skill provides secure secret management by integrating the 1Password CLI to read, inject, and supply credentials to Hermes tasks without exposing sensitive data.

Core Features & Use Cases

  • Install and configure the 1Password CLI (op).
  • Authenticate using service accounts, desktop app integration, or Connect server.
  • Read secrets from vaults (e.g., op read 'op://Vault/Item/field').
  • Inject secrets into templates and run commands with secret env vars using op inject or op run.

Quick Start

Install the 1Password CLI, authenticate using your preferred method, and begin reading or injecting secrets into commands.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I inject secrets into commands using the 1Password CLI?β–Ό

To inject secrets using the 1Password CLI, you authenticate and use the `op inject` command to populate templates with secret environment variables for your tasks without exposing sensitive data directly.

What authentication methods can I use with the 1Password CLI for secret management?β–Ό

The 1Password CLI supports three authentication methods: service accounts, desktop app integration, and a Connect server, allowing you to securely access vaults and read secrets for your tasks.

How do I read a specific secret from a vault with the 1Password CLI?β–Ό

You can read secrets from a vault by running the `op read` command with a direct reference string like `op://Vault/Item/field` to retrieve the exact credential needed for your task.

Do I need to install the 1Password CLI to manage credentials in Hermes?β–Ό

Yes, installing the 1Password CLI (`op`) is required to manage credentials in Hermes, as it enforces the authentication flows and safe handling guardrails needed to access secrets.

What is the best way to run commands with secret environment variables from 1Password?β–Ό

The best way to run commands with secret environment variables is using `op run`, which supplies credentials to tasks dynamically while enforcing safe handling guardrails to prevent accidental secret exposure.

Are there limitations when using service accounts for 1Password secret injection?β–Ό

When using service accounts for 1Password secret injection, you must adhere to safe handling guardrails to prevent exposure, as the process enforces strict CLI installation and authentication flows for accessing vaults.