1password

Retrieve and inject secrets from 1Password vaults using the op CLI.

Updated Jun 18, 2026
One-click install
npx skills add https://github.com/wangqianCAI/OBI --skill 1password-wangqiancai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/wangqianCAI/OBI/tree/main/skills/1password
Command: npx skills add https://github.com/wangqianCAI/OBI --skill 1password-wangqiancai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires op, and includes references (resource) components.

What problem does it solve?

This Skill solves the challenge of securely accessing, injecting, and managing sensitive credentials within automated workflows without exposing them in logs or plain text.

Core Features & Use Cases

  • Secure Secret Injection: Safely inject secrets into environment variables or configuration files using op inject.
  • CLI Integration: Provides a standardized, secure way to interact with 1Password vaults and items via the official CLI.
  • Use Case: Automatically retrieve a database password from a 1Password vault and inject it into a local configuration file during a deployment process.

Quick Start

Use the 1password skill to sign in and retrieve the secret value for the production database password.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely inject secrets into environment variables for automated workflows?

To securely inject secrets into environment variables, you can use the 1Password CLI to retrieve credentials and populate configurations without exposing them in plain text. This prevents sensitive data from appearing in logs during automated deployments.

What prerequisites do I need to manage secrets with the 1Password CLI?

Managing secrets with the 1Password CLI requires the 1Password desktop application and the op CLI binary to be installed and configured with system integration. This setup enables secure credential retrieval and automated authentication.

How does automated authentication work for retrieving production credentials?

Automated authentication works by leveraging the 1Password CLI to securely access vaults and retrieve production credentials. This facilitates seamless secret injection into local configuration files during deployment processes.

Can I retrieve a database password from a vault and inject it into a configuration file?

Yes, you can retrieve a database password from a 1Password vault and inject it into a local configuration file using op inject. This provides a standardized, secure way to integrate secrets into deployment workflows.

What is the best way to manage sensitive credentials in production environments without exposing them?

The best way to manage sensitive credentials in production is using the 1Password CLI for secure credential retrieval and secret injection. This ensures secrets are accessed safely without being exposed in logs or plain text configurations.

Why should I use the 1Password CLI instead of hardcoding secrets in deployment scripts?

Using the 1Password CLI instead of hardcoding secrets solves the challenge of securely managing sensitive credentials within automated workflows. It prevents exposure in logs or plain text by facilitating automated, secure secret injection.