1password

Name: 1password
Availability: InStock
Author: icyzh

Inject secrets and run commands using the 1Password CLI.

1|Updated Jul 31, 2026

Search Tags:#security #authentication #cli #encryption #secrets #1password

Ready to run

npx skills add https://github.com/icyzh/hermes-web --skill 1password-icyzh

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/icyzh/hermes-web/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/icyzh/hermes-web --skill 1password-icyzh

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill eliminates the security risks associated with storing sensitive credentials in plaintext files or environment variables by leveraging 1Password for secure secret management.

Core Features & Use Cases

Secret Injection: Safely inject secrets into configuration files or templates at runtime using the op inject command.
Command Execution: Run shell commands with sensitive environment variables securely via op run.
Secret Retrieval: Fetch specific credentials, API keys, or one-time passwords directly from your 1Password vault.

Quick Start

Use the 1password skill to inject the database password from your vault into the application configuration file.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I inject secrets into configuration files at runtime?▼

Yes, command execution runs shell commands with sensitive environment variables securely via op run. This allows automated workflows to access credentials without exposing them in plaintext environment variables.

Do I need a service account token to use 1Password CLI for secret retrieval?▼

Storing sensitive credentials in plaintext files or environment variables is unsafe. Secure secret management leverages 1Password to eliminate these security risks by injecting secrets only when needed for automated workflows.

Can I fetch one-time passwords directly from my 1Password vault for automated workflows?▼

Secret injection replaces hardcoded plaintext credentials by fetching data directly from your vault at runtime. This approach ensures sensitive credentials are never stored in plaintext files or environment variables.

What is the best way to run shell commands with sensitive environment variables securely?▼

Running shell commands with sensitive environment variables securely uses op run to execute commands. It leverages 1Password for secret management, preventing plaintext exposure during automated workflows.