1password

Manage and inject secrets through the 1Password CLI.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/THTProtocol/lastochka --skill 1password-thtprotocol
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/THTProtocol/lastochka/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/THTProtocol/lastochka --skill 1password-thtprotocol

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires 1password-cli, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill solves the problem of securely managing and injecting secrets using the 1Password CLI, eliminating the need for plaintext variables or files.

Core Features & Use Cases

  • Service Account Integration: Set up and use 1Password service accounts for secure access.
  • Secret Management: Read, inject, and run commands with secrets managed through 1Password.
  • Use Case: Automatically sign in to 1Password and inject secrets into scripts or commands for secure operations.

Quick Start

Set up your 1Password service account and use the skill to read a secret with the command: 'op read "op://Vault/Item/field"'

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely inject secrets into scripts without using plaintext variables?

To avoid plaintext variables, securely inject secrets by using the 1Password CLI to automatically sign in and pass credentials directly into scripts or commands for execution.

What do I need to set up to read secrets with the 1Password CLI?

To read secrets with the 1Password CLI, you need an active 1Password account and the 1Password CLI installed, with optional desktop app integration for interactive sign-in.

When should I use a 1Password service account for secret management?

Use a 1Password service account for secret management when you need automated, secure access to sensitive data in scripts or CI environments without interactive sign-in prompts.

Can I run commands with secrets fetched directly from 1Password?

Yes, you can run commands with secrets fetched directly from 1Password by using the CLI's inject and run commands, which facilitate secure execution of sensitive data operations.

Does secure secret injection with the 1Password CLI require the desktop app?

Secure secret injection with the 1Password CLI does not strictly require the desktop app; service accounts can be used independently, but the desktop app offers optional interactive sign-in.

What is the best way to retrieve a specific secret from a 1Password vault?

The best way to retrieve a specific secret from a 1Password vault is using the 'op read' command with the secret reference format, such as 'op://Vault/Item/field'.

Related Skills