What problem does it solve? Managing secrets as plaintext environment variables or files is risky and hard to maintain. This Skill sets up the 1Password CLI (op) so secrets are read, injected, or passed to commands directly from 1Password vaults without exposing raw values. ## Core Features & Use Cases - CLI Setup and Authentication: Install op and sign in via desktop app integration, service account token (OP_SERVICE_ACCOUNT_TOKEN), or a self-hosted Connect server. - Secret Operations: Read secret references like op://Vault/Item/field, fetch one-time passwords, inject secrets into templates with op inject, and run commands with secret env vars via op run. - Headless and CI Support: Use service account tokens for non-interactive environments, or a dedicated tmux session to preserve desktop-app auth across terminal calls. - Use Case: You need a database password in a deployment script. Instead of hardcoding it, set DB_PASSWORD to an op:// reference and run the script with op run so the secret is resolved at runtime. ## Quick Start Set up the 1Password CLI with a service account token and read the database password from my app-prod vault.
