1password

Read and inject 1Password secrets into Hermes workflows via the CLI.

2|Updated Mar 26, 2026
One-click install
npx skills add https://github.com/CUexter/hermes-agent --skill 1password-cuexter
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/CUexter/hermes-agent/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/CUexter/hermes-agent --skill 1password-cuexter

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Secure, centralized secret management for Hermes workflows using the 1Password CLI, eliminating plaintext secrets in configs and pipelines.

Core Features & Use Cases

  • Sign in to 1Password CLI (op signin) and manage session context for Hermes tasks.
  • Read secrets from op:// paths (op read) and inject into config templates or environments (op inject).
  • Run commands with secret env vars via op run and securely handle tokens for service accounts or desktop app integration.

Quick Start

Sign in with op signin, read secrets with op read, and inject them into your workflow using op inject.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I inject secrets into config templates using 1Password CLI?

You can inject secrets into config templates using 1Password CLI by securely reading sensitive values from op:// paths and applying them to your workflow environments with op inject. This eliminates plaintext secrets in pipelines.

What is the best way to manage plaintext secrets in automation pipelines?

The best way to manage plaintext secrets in automation pipelines is centralized secret management using the 1Password CLI. It securely reads sensitive values and injects them into config templates, preventing plaintext credential exposure.

Can I use service accounts with 1Password CLI for automation authentication?

Yes, you can use service accounts with the 1Password CLI for automation authentication. The tool securely handles token management and supports desktop app integration alongside service account contexts for CLI authentication.

How do I run commands with secret environment variables via op run?

You can run commands with secret environment variables by using op run via the 1Password CLI. This securely handles tokens and passes sensitive values directly into your command execution environment during automation tasks.

Does 1Password CLI require desktop app integration to read secrets?

1Password CLI does not strictly require desktop app integration to read secrets; it also supports service accounts. You can use either environment to handle op signin, read secret values, and manage session context.