skills.rest
MLT-OSS
MLT-OSSOFFICIAL
Explore all skills by this author →
WebsiteGitHub

1password

Configure 1Password CLI and read or inject secrets via op commands.

14|5|Updated Apr 9, 2026
Search Tags:#security#authentication#secrets management#1password#service account#op cli#credential injection
One-click install
npx skills add https://github.com/MLT-OSS/hermes-agent-go --skill 1password-mlt-oss
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/MLT-OSS/hermes-agent-go/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/MLT-OSS/hermes-agent-go --skill 1password-mlt-oss

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Managing secrets through plaintext environment variables or config files is risky and hard to maintain. This Skill sets up the 1Password CLI (op) so secrets stay in your vault and are read, injected, or passed to commands only at runtime. ## Core Features & Use Cases - CLI Setup and Authentication: Install op and authenticate via desktop app integration, service account token (OP_SERVICE_ACCOUNT_TOKEN), or a self-hosted Connect server. - Secret Operations: Read secrets with op read, fetch one-time passwords, inject secrets into templates with op inject, and run commands with secret env vars via op run. - Headless and CI Support: Use service account tokens for non-interactive environments, or a dedicated tmux session to preserve desktop-app auth across terminal calls. - Use Case: You need a database password for a deployment script. Instead of pasting it into a file, run the command through op run so the secret is resolved from your 1Password vault at execution time. ## Quick Start Ask the agent to install the 1Password CLI, sign in with a service account token, and read a secret from your vault using an op:// reference.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I read a secret from 1Password CLI?▼

Use op read with a secret reference like op://Vault/Item/field, for example op read "op://app-prod/db/password". You must be signed in via desktop app integration, a service account token, or a Connect server first.

How to inject secrets into config files with 1Password CLI?▼

Use op inject with a template containing op:// references, such as echo "db_password: {{ op://app-prod/db/password }}" | op inject. You can also use op inject -i config.tpl.yml -o config.yml for file-based templates.

Can I use 1Password CLI in CI or headless environments?▼

Yes, authenticate with a service account by setting OP_SERVICE_ACCOUNT_TOKEN instead of interactive op signin. Service accounts require CLI version 2.18.0 or later and support op read, op inject, and op run.

Why does op fail with account is not signed in?▼

This happens when the authentication context is lost between terminal calls, common in non-interactive shells. Run op signin again in the same tmux session, or switch to a service account token which persists automatically.

How do I run a command with secrets as environment variables?▼

Set the variable to an op:// reference and use op run, for example export DB_PASSWORD="op://app-prod/db/password" then op run -- your-command. The CLI resolves the reference at runtime without writing the secret to disk.

Related Skills

Explore More Software Engineering Skills→
cogpycogpy

1password

Manage and retrieve secrets securely using the 1Password CLI.

Official
Intermediate
TurgunoffTurgunoff

source-command-sparc-devops

Automates infrastructure deployment, CI/CD pipelines, and cloud resource provisioning tasks.

Community
Intermediate
alirezarezvanialirezarezvani
25.3k

secrets-vault-manager

Configure HashiCorp Vault and cloud secret stores with rotation, audit, and incident response workflows.

Community
Advanced
Tonybleything76Tonybleything76

Env & Secrets Manager

Manage environment variables and secrets across application lifecycles.

Community
Advanced