skills.rest
matthew-johnson
matthew-johnsonCOMMUNITY
Explore all skills by this author →
GitHub

1password

Read and inject 1Password CLI secrets into applications and automation workflows.

Updated Apr 20, 2026
Search Tags:#devops#cli#secrets#read#inject#1password#op
One-click install
npx skills add https://github.com/matthew-johnson/hermes-agent --skill 1password-matthew-johnson
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/matthew-johnson/hermes-agent/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/matthew-johnson/hermes-agent --skill 1password-matthew-johnson

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Manage secrets securely by using the 1Password CLI to read and inject credentials without exposing them in plaintext in configurations or logs.

Core Features & Use Cases

  • Install and configure the 1Password CLI (op) for secure secret management in local or CI environments.
  • Sign in via service accounts, desktop app integration, or Connect server, then read secrets with op read and inject into templates or environments with op inject.
  • Use op run to execute commands with secret environment variables, ensuring secrets do not leak into source control or logs.

Quick Start

Install op, sign in, and begin reading or injecting secrets into your configuration.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely manage secrets in CI/CD pipelines without exposing them in plaintext?▼

You can securely manage secrets in CI/CD pipelines by using the 1Password CLI to read and inject credentials directly into workflows without plaintext exposure. It supports service accounts and Connect server integrations for automated environments.

What is the best way to inject 1Password credentials into application configuration files?▼

The best way to inject credentials into configurations is using the 1Password CLI's op inject command. It populates templates with secrets dynamically during local development or remote automation tasks, preventing plaintext credentials from entering source control.

Can I use the 1Password CLI to run commands with secret environment variables?▼

Yes, you can use the 1Password CLI to run commands with secret environment variables by utilizing the op run command. This executes your target command while ensuring secrets are passed securely and do not leak into system logs.

Does the 1Password CLI support authentication via service accounts for automation workflows?▼

Yes, the 1Password CLI supports authentication via service accounts for automation workflows. It also supports desktop app integration and Connect server authentication, allowing you to sign in and read secrets across various local and remote environments.

How do I read secrets from 1Password for local development environments?▼

To read secrets for local development, you use the op read command after installing and configuring the 1Password CLI. This fetches credentials securely via desktop app integration or service accounts for immediate application use.

Related Skills

Explore More Software Engineering Skills→
jason660519jason660519

1password

Authenticate with the 1Password CLI and inject secrets into environments.

Community
Intermediate
eddieluengeddielueng
1

1password

Retrieve and inject application secrets from 1Password using the op CLI.

Community
Intermediate
Hack23Hack23
235

secrets-management

Enforce environment-based configuration and rotation policies for credentials.

Official
Advanced
githubgithub
4.9k

http_mcp_headers

Convert HTTP MCP header secrets into environment variable passthrough.

Official
Advanced