1password

Manage secrets via the 1Password CLI with op read, run, and inject.

Updated Jan 20, 2026
One-click install
npx skills add https://github.com/Team-Hireal/RealChat --skill 1password-team-hireal
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/Team-Hireal/RealChat/tree/main/openclaw/skills/1password
Command: npx skills add https://github.com/Team-Hireal/RealChat --skill 1password-team-hireal

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill streamlines the secure management and retrieval of sensitive information like passwords, API keys, and SSH keys using the 1Password command-line interface.

Core Features & Use Cases

  • Secure Secret Access: Read, inject, and run secrets directly from 1Password without exposing them in logs or files.
  • CLI Integration: Facilitates the setup and use of the 1Password CLI, including sign-in and multi-account management.
  • Use Case: Securely access your database password for an application deployment by using op run to inject the secret directly into the environment, ensuring it's never written to disk.

Quick Start

Use the 1password skill to sign in to your 1Password account within a new tmux session.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely retrieve secrets using the 1Password CLI for application deployments?

To retrieve secrets securely, use the 1Password CLI commands `op read`, `op run`, or `op inject` to access and integrate secrets directly into your environment without exposing them in logs or writing them to disk.

How does injecting secrets with `op run` prevent sensitive data from being written to disk?

Injecting secrets with `op run` dynamically populates environment variables at runtime directly from your 1Password account, ensuring sensitive data like API keys and database passwords are never saved to files or exposed in logs.

Do I need a 1Password account and desktop app integration to manage secrets via CLI?

Yes, you need an active 1Password account and CLI setup to manage secrets. Desktop app integration is supported to streamline authentication, and optional tmux session management handles sign-in workflows.

Can I manage multiple 1Password accounts when signing in through the command line?

Yes, the 1Password CLI supports multi-account sign-in, allowing you to manage and retrieve secrets across different 1Password accounts within your terminal session.

What is the best way to automate database password access without exposing it in configuration files?

The best way to automate database password access is using `op inject` or `op run` to dynamically pull the secret directly from 1Password into your application environment, preventing it from being written to configuration files.