1password

Install, authenticate, and inject secrets via the 1Password CLI.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/helix4u/hermes-agent --skill 1password-helix4u
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/helix4u/hermes-agent/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/helix4u/hermes-agent --skill 1password-helix4u

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Set up and use the 1Password CLI to manage secrets securely instead of exposing them in plaintext, enabling safer automation.

Core Features & Use Cases

  • Install and configure the 1Password CLI (op) and sign in via service accounts or desktop app integration.
  • Read secrets from op:// references and inject them into templates or commands at runtime.
  • Run commands with secret env vars using op run and securely manage secret references in automation scripts.

Quick Start

Install the 1Password CLI, sign in using your preferred method, and verify Hermes can access secrets for automated workflows.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I inject secrets into automation scripts using the 1Password CLI?

You inject secrets into automation scripts using the 1Password CLI by reading op:// references and running commands with secret environment variables via op run at runtime. This enables safer automation by replacing plaintext secret exposure with secure runtime injection.

What are the available authentication methods for the 1Password CLI in CI workflows?

Available authentication methods for the 1Password CLI in CI workflows include service accounts and desktop app integration. When using the desktop app flow, session handling is managed via tmux to maintain secure access across local terminals and automated environments.

Can I use 1Password CLI to manage secrets across local terminals and CI environments?

Yes, you can use 1Password CLI to manage secrets across local terminals and CI environments. The CLI supports end-to-end secret management, allowing developers and operators to securely install, authenticate, and read or inject secrets in automation workflows.

What is the best way to avoid exposing plaintext secrets in developer automation?

The best way to avoid exposing plaintext secrets in developer automation is to use a secrets management tool like the 1Password CLI. It securely reads secrets from op:// references and injects them directly into templates or commands at runtime.

Do I need the desktop app to use service accounts with the 1Password CLI?

No, you do not need the desktop app to use service accounts with the 1Password CLI. The CLI supports multiple authentication methods, allowing you to sign in directly using service accounts for automation workflows without requiring desktop app integration.