1password

Read and inject 1Password CLI credentials into configuration files and commands.

Updated Apr 21, 2026
One-click install
npx skills add https://github.com/samuelmukoti/myai-agent --skill 1password-samuelmukoti
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/samuelmukoti/myai-agent/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/samuelmukoti/myai-agent --skill 1password-samuelmukoti

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Secrets management in automation pipelines is error-prone and insecure when hard-coded or exposed in logs. This Skill provides a structured, auditable way to read and inject credentials using the 1Password CLI, enabling safe, repeatable configurations.

Core Features & Use Cases

  • Sign in to 1Password via CLI and verify authentication
  • Read secrets using op read and inject them into templates or environment variables
  • Run commands with secret values in controlled, auditable contexts
  • Use with desktop app flow or service account tokens for flexible automation

Quick Start

Install the 1Password CLI, sign in, and begin reading or injecting secrets into your configurations.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I inject secrets into configuration files using the 1Password CLI?

Secret management in automation pipelines is necessary to prevent hard-coded credentials from being exposed in logs. Using the 1Password CLI provides a structured, auditable method to safely read and inject credentials into workflows without leaking sensitive data.

Can I use 1Password service account tokens for CI environment authentication?

Yes, you can authenticate in CI environments using 1Password service account tokens. This method provides flexible automation alongside desktop app integration, allowing automated pipelines to securely retrieve and inject credentials without interactive sign-in.

What's the best way to automate credential injection across workflows?

The best way to automate credential injection is using a structured CLI approach that reads secrets and populates environment variables or templates. This ensures safe, repeatable configurations by standardizing how credentials are retrieved and applied across desktop or CI contexts.

Do I need the 1Password desktop app to read secrets via the CLI?

The 1Password CLI requires a chosen authentication method to read and inject secrets. You must have the CLI installed and select either desktop app integration for local workflows or a service account token for CI environments.

Why does my interactive 1Password CLI session drop during automation?

Interactive 1Password CLI sessions can drop during automation if not managed correctly. Using an optional tmux workflow helps maintain reliable interactive sessions, ensuring continuous authentication when reading and injecting secrets into commands.