1password

Manage secrets via the 1Password CLI for Hermes workflows.

1|Updated Mar 22, 2026
One-click install
npx skills add https://github.com/nelohenriq/hermes-agent-plus --skill 1password-nelohenriq
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/nelohenriq/hermes-agent-plus/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/nelohenriq/hermes-agent-plus --skill 1password-nelohenriq

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Manage secrets via the 1Password CLI (op) so they are not stored in plaintext env vars or files.

Core Features & Use Cases

  • Authenticate with 1Password desktop app integration or service accounts and use op to read, inject, and run commands with secret env vars.
  • Read and inject secrets into templates or configurations using op read and op inject, ensuring credentials stay protected.
  • Support Hermes execution patterns, including tmux-based authenticated sessions for reliable non-interactive usage.

Quick Start

Sign in to 1Password CLI and begin securely reading and injecting secrets into your workflows.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage secrets with the 1Password CLI in automated workflows?

Manage secrets with the 1Password CLI by authenticating via the desktop app or service accounts, then use op read and op inject to securely retrieve and inject credentials into your workflows.

Can I use 1Password service accounts for headless secret retrieval?

Yes, 1Password service accounts support headless secret retrieval by providing an OP service account token, allowing you to authenticate non-interactively and securely fetch secrets without the desktop app.

How do I inject secrets into configuration templates using op?

Inject secrets into configuration templates using the op inject command, which securely replaces placeholder variables with actual credentials from your 1Password vault, ensuring secrets stay protected in files.

Do I need tmux to maintain authenticated 1Password CLI sessions?

You need tmux to maintain authenticated 1Password CLI sessions for reliable non-interactive usage, ensuring your Hermes execution patterns remain stable during headless or automated secret retrieval flows.

What is the best way to avoid storing secrets in plaintext environment variables?

The best way to avoid storing secrets in plaintext environment variables is using the 1Password CLI to dynamically read and inject credentials at runtime, keeping sensitive data out of files and configs.

Does 1Password CLI work with desktop app integration for sign-in?

Yes, 1Password CLI works with desktop app integration for sign-in, allowing you to authenticate through the graphical app to manage secrets and run commands without manual password entry.