1password

Manage secrets securely using the 1Password CLI with op run and inject.

Updated Jun 28, 2026
One-click install
npx skills add https://github.com/jleechanorg/hermes-agent --skill 1password-jleechanorg
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/jleechanorg/hermes-agent/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/jleechanorg/hermes-agent --skill 1password-jleechanorg

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill enables secure management of secrets by using the 1Password CLI to replace plaintext credentials with dynamic secret references, reducing exposure and manual handling.

Core Features & Use Cases

  • Install and configure the 1Password CLI (op)
  • Sign in via desktop app integration, service accounts, or Connect
  • Read secrets from vaults using op read
  • Inject secrets into templates or configurations using op inject
  • Run commands with secret environment variables using op run

Quick Start

Install the 1Password CLI, sign in using your preferred method, and start reading or injecting secrets into your applications.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I inject secrets into configuration files using the 1Password CLI?

To inject secrets into configuration files, use the 1Password CLI to replace plaintext credentials with dynamic secret references. This allows you to populate templates securely without manual handling using the op inject command.

What's the best way to manage secrets for non-interactive automation?

The best way to manage secrets for non-interactive automation is using the 1Password CLI. It supports authenticating via service accounts or Connect to safely read and inject secrets into applications without requiring manual sign-ins.

How does desktop app integration work with the 1Password CLI?

Desktop app integration with the 1Password CLI works by connecting the op CLI directly to the 1Password desktop app. This Hermes flow allows you to authenticate and read secrets from your vaults without entering your secret password repeatedly.

Can I run commands with secret environment variables using op run?

Yes, you can run commands with secret environment variables using op run. The 1Password CLI dynamically resolves secret references and passes them as environment variables to your specified application process at runtime.

How do I install and authenticate the 1Password CLI to read secrets from vaults?

Install the 1Password CLI and authenticate using desktop app integration, service accounts, or Connect. Once signed in, you can use the op read command to securely retrieve and read secrets directly from your specified vaults.

Why should I use secret references instead of plaintext credentials?

You should use secret references instead of plaintext credentials to reduce exposure and manual handling. The 1Password CLI dynamically fetches secrets at runtime, ensuring sensitive data is never hardcoded in your application configurations or templates.