skills.rest
eddielueng
eddieluengCOMMUNITY
Explore all skills by this author →
GitHub

1password

Retrieve and inject application secrets from 1Password using the op CLI.

1|Updated Apr 14, 2026
Search Tags:#cli#secrets management#1password#op#service account#credential retrieval#secure injection
One-click install
npx skills add https://github.com/eddielueng/hermes-agent-zh --skill 1password-eddielueng
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/eddielueng/hermes-agent-zh/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/eddielueng/hermes-agent-zh --skill 1password-eddielueng

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

It eliminates the risk and inconvenience of storing or copying sensitive credentials in plaintext by using the 1Password CLI to fetch and inject secrets safely when you run commands.

Core Features & Use Cases

  • Service-account and desktop integration: Authenticate non-interactively with OP_SERVICE_ACCOUNT_TOKEN or interactively via desktop app integration.
  • Secret retrieval and injection: Read secret references (e.g., op://...) and inject them into templates/configs using op inject.
  • Safe execution with secrets: Run commands with secrets through op run so credentials are available to the command without being broadly exposed.

Quick Start

Tell the Hermes user to set your service account token in ~/.hermes/.env as OP_SERVICE_ACCOUNT_TOKEN, then run a command using op read op://<Vault>/<Item>/<field> to verify you can retrieve secrets.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I inject secrets into environment variables using 1Password CLI?▼

You can inject secrets using the 1Password CLI by running `op inject` to populate template configurations or `op run` to execute commands with secret environment variables, ensuring raw credentials are never broadly exposed.

What is a 1Password service account token used for in DevOps?▼

A 1Password service account token enables non-interactive authentication for the `op` CLI, allowing automated DevOps pipelines to securely retrieve credentials and inject secrets without requiring manual sign-in or desktop app integration.

How do I retrieve a specific credential from 1Password via command line?▼

You retrieve credentials from 1Password via command line using the `op read` command followed by a secret reference string formatted as `op://<Vault>/<Item>/<field>`, which fetches the specific secret value safely.

Can I use 1Password CLI to manage application secrets without storing plaintext credentials?▼

Yes, 1Password CLI eliminates storing plaintext credentials by fetching secrets dynamically at runtime through `op read`, `op inject`, and `op run` patterns, keeping sensitive values out of static configuration files.

Do I need the 1Password desktop app to use the op CLI for secret retrieval?▼

No, you do not need the 1Password desktop app if you configure the `OP_SERVICE_ACCOUNT_TOKEN` environment variable, which allows the `op` CLI to authenticate non-interactively for automated secret retrieval workflows.

Related Skills

Explore More Software Engineering Skills→
julianobarbosajulianobarbosa
7

1password

Retrieve and inject 1Password secrets via op CLI and Kubernetes operators.

Community
Intermediate
HarriesHarries

1password

Manage secrets securely with the 1Password CLI by reading, injecting, and running commands with them.

Community
Intermediate
NagyViktNagyVikt
2

env-vars

Manage Vercel environment variables and OIDC token lifecycles via CLI.

Community
Intermediate
Solitude01Solitude01

1password

Manage 1Password CLI secrets and inject credentials in tmux sessions.

Community
Intermediate