1password

Manage and inject secrets using the 1Password CLI (op) across terminals and automation.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/travelinman1013/leroys-agent --skill 1password-travelinman1013
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/travelinman1013/leroys-agent/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/travelinman1013/leroys-agent --skill 1password-travelinman1013

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Securely manage and access secrets using the 1Password CLI (op) across local terminals and automation, avoiding plaintext exposure and manual secret handling.

Core Features & Use Cases

  • Sign in and authenticate using a service account token or desktop app integration, enabling secure secret access.
  • Read and inject secrets into commands or templates with op read and op inject; run commands with secret env vars using op run.
  • Support for non-interactive automation and Hermes execution patterns, including guidance on using op in tmux sessions to stabilize auth context.

Quick Start

Install the 1Password CLI, configure authentication (service account token or desktop app), and verify access with op whoami.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I inject secrets into commands using the 1Password CLI?

You can inject secrets into commands using the 1Password CLI through `op inject` for templates and `op run` to execute commands with secret environment variables. This avoids plaintext exposure and manual handling.

What's the best way to authenticate the 1Password CLI for automation pipelines?

For non-interactive automation pipelines, authenticating the 1Password CLI with a service account token is recommended. You can verify successful access for automated workflows using the `op whoami` command.

Can I use 1Password CLI with desktop app integration instead of a service account?

Yes, 1Password CLI supports desktop app integration as an authentication alternative to service accounts. This allows secure secret access across local terminals and Hermes-integrated workflows.

How do I stabilize 1Password CLI authentication context in tmux sessions?

To stabilize 1Password CLI authentication context in tmux sessions for Hermes execution patterns, you should follow specific guidance on using `op` within tmux. This ensures consistent secret access during local terminal workflows.

Why does managing secrets manually in automation pipelines cause security issues?

Managing secrets manually in automation pipelines causes plaintext exposure and security vulnerabilities. Using 1Password CLI with `op run` and `op inject` enforces best practices for secure secret handling and access.

Do I need a service account token to read secrets with 1Password CLI?

No, you do not need a service account token to read secrets with 1Password CLI. You can authenticate using either a service account token or desktop app integration to securely access secrets.