1password

Manage secrets securely with the 1Password CLI by reading, injecting, and running commands with them.

Updated Apr 24, 2026
One-click install
npx skills add https://github.com/Harries/hermes-agent --skill 1password-harries
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/Harries/hermes-agent/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/Harries/hermes-agent --skill 1password-harries

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Securely manage secrets using the 1Password CLI to install, sign in, and inject secrets into commands without exposing sensitive data.

Core Features & Use Cases

  • Setup and sign-in with 1Password CLI (op) including service accounts or desktop app integration.
  • Read secrets with op read, inject into templates with op inject, and run commands with secret env vars.
  • Use in development and operations workflows to manage credentials securely and reproducibly.

Quick Start

Install the 1Password CLI, configure an authentication method, and sign in to verify access.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I inject secrets into environment variables using 1Password CLI?

You can inject secrets into environment variables using 1Password CLI by defining templates and running the op inject command, which securely populates configurations without exposing sensitive data directly in your runtime commands.

What do I need to configure before reading secrets with the op CLI?

Before reading secrets with the op CLI, you need to install the 1Password CLI and configure an authentication method, which requires either a service account token or desktop app integration to sign in and verify access.

Can I use a service account token for automated secret management in CI?

Yes, you can use a service account token for automated secret management in CI, allowing machines to authenticate and securely read or inject secrets into development and operations workflows without manual sign-in.

What is the difference between op read and op inject for secrets management?

For secrets management, op read retrieves individual secret values directly, while op inject populates templates with multiple secrets simultaneously to run commands with securely populated environment variables.

Does 1Password CLI work with desktop app integration for local development?

Yes, 1Password CLI works with desktop app integration for local development, allowing you to sign in through the desktop application to securely access and manage credentials without entering your secret password repeatedly.