1password

Manage secrets with the 1Password CLI across Hermes workflows.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/objval/hermes-agent --skill 1password-objval
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/objval/hermes-agent/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/objval/hermes-agent --skill 1password-objval

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Secrets management across automation and terminals is error-prone; this skill provides a reliable way to set up and use the 1Password CLI (op) within Hermes to securely access and inject secrets.

Core Features & Use Cases

  • Configure and sign in to 1Password CLI for Hermes workflows.
  • Read secrets from 1Password vaults and inject them into templates or environment variables.
  • Run commands with secret data securely loaded, supporting multiple authentication methods (desktop app, service accounts, or Connect) for automation.

Quick Start

Sign in with op signin, then read a secret with op read and inject it into a template as needed.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage secrets securely using the 1Password CLI in Hermes?

You can securely manage secrets using the 1Password CLI by configuring the tool, signing in, and reading secret data to inject into your Hermes workflows. It supports setup, sign-in, and secret injection across multiple authentication methods.

What is the best way to inject 1Password vault secrets into environment variables?

Injecting 1Password vault secrets into environment variables is done by using the CLI to read secret data and load it into templates or runtime environments. This allows commands to execute with securely loaded secret data.

Does the 1Password CLI support automation with service accounts and Connect?

Yes, the 1Password CLI supports automation through multiple authentication methods including the desktop app, service accounts, and Connect workflows. This allows developers and operations teams to securely access secrets in automated environments.

How do I set up and sign in to the 1Password CLI for DevOps workflows?

To set up the 1Password CLI for DevOps workflows, you configure the tool and use the 'op signin' command to authenticate. Once authenticated, you can read secrets and integrate them directly into your automation pipelines.

Why use CLI-based secret management instead of manual environment variable configuration?

CLI-based secret management prevents error-prone manual configuration across terminals and automation. It provides a reliable way to securely access, read, and inject secrets directly from 1Password vaults into your workflows.