1password

Automate secret retrieval and injection using the 1Password CLI.

1.2k|116|Updated Mar 19, 2026
One-click install
npx skills add https://github.com/math-inc/OpenGauss --skill 1password-math-inc
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/math-inc/OpenGauss/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/math-inc/OpenGauss --skill 1password-math-inc

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Set up and use 1Password CLI (op) to manage secrets securely, reducing risky plaintext environment variables and manual secret handling.

Core Features & Use Cases

  • Sign in to 1Password and manage authentication through the CLI.
  • Read secrets with op read and inject them into templates or commands with op inject.
  • Work with desktop app integration or service accounts for non-interactive contexts.

Quick Start

Authenticate with op signin and perform a sample read and inject using op read and op inject.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage secrets securely in automated deployment pipelines?

Manage secrets securely in automated deployment pipelines by using the 1Password CLI to authenticate and inject sensitive values directly into applications, replacing risky plaintext environment variables.

How does 1Password CLI session management work for reading secrets?

1Password CLI session management works by authenticating with `op signin` to establish a session, then using `op read` to retrieve specific secret values and `op inject` to populate templates or commands with those sensitive values automatically.

Can I use 1Password CLI with service accounts for non-interactive workflows?

Yes, you can use 1Password CLI with service accounts for non-interactive workflows. The CLI supports service accounts and optional desktop app integration to handle authenticated secret retrieval in automated contexts without manual sign-in prompts.

What is the best way to inject secrets into templates using 1Password?

The best way to inject secrets into templates using 1Password is the `op inject` command. It reads secret references from a template file and outputs a populated file with the actual sensitive values securely injected from your 1Password vault.

Do I need the 1Password desktop app to use the CLI for secret retrieval?

No, you do not need the 1Password desktop app to use the CLI for secret retrieval. The CLI can authenticate independently using `op signin` and service accounts, though optional desktop app integration is supported for seamless handling.

Why use 1Password CLI instead of plaintext environment variables for secrets?

Use the 1Password CLI instead of plaintext environment variables to reduce risky manual secret handling. The CLI automates secure secrets management by reading and injecting sensitive values on demand, preventing hardcoded credentials in application configurations.