1password

Configure 1Password CLI for secure secret retrieval and injection.

Updated Apr 2, 2026
One-click install
npx skills add https://github.com/JKhyro/HERMES-AGENT --skill 1password-jkhyro
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/JKhyro/HERMES-AGENT/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/JKhyro/HERMES-AGENT --skill 1password-jkhyro

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps you manage secrets securely without exposing passwords, tokens, or one-time codes in plaintext files or ad hoc shell commands.

Core Features & Use Cases

  • CLI Setup and Sign-In: Install and authenticate the 1Password CLI for interactive desktop app flows, service accounts, or Connect server usage.
  • Secret Retrieval and Injection: Read vault items, inject secret references into templates, and pass credentials into commands safely at runtime.
  • Automation-Friendly Workflows: Use it for development, CI, and headless environments where stable secret handling and repeatable authentication matter.

Quick Start

Ask the assistant to help you install and authenticate the 1Password CLI, then use it to read, inject, or run secrets with the account method you choose.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I retrieve secrets from 1Password using the command line?

You can inject secrets into templates using the op inject command after authenticating with the 1Password CLI. This replaces secret references in your template files with actual credentials at runtime, preventing sensitive data exposure in static files or ad hoc shell commands.

Can I use 1Password CLI for headless automation and CI environments?

Yes, the 1Password CLI supports headless automation and CI environments through service account tokens. You can authenticate without the desktop app and use op run to securely pass credentials into commands during automated workflows.

What do I need to set up before using 1Password secret management workflows?

You need the op CLI installed and either a 1Password account or a service account token. Depending on your workflow, you may also need the desktop app for interactive authentication or a Connect server for automated server environments.

How does op run execute commands with injected secrets?

The op run command executes commands by resolving 1Password secret references from environment variables or arguments at runtime, passing the actual credentials directly into the process environment without writing them to disk or shell history.

Does 1Password CLI authentication work inside tmux sessions?

Yes, 1Password CLI authentication works inside tmux sessions. The Skill explicitly covers tmux workflows, allowing you to use op signin and subsequent secret retrieval commands within your terminal multiplexer environment.