Read and inject credentials from the 1Password CLI into commands and templates.
npx skills add https://github.com/Z43L/zeus-agent --skill 1password-z43l
Please help me install this Agent Skill. Skill: 1password Source: https://github.com/Z43L/zeus-agent/tree/main/optional-skills/security/1password Command: npx skills add https://github.com/Z43L/zeus-agent --skill 1password-z43l
This Skill prevents leaking sensitive credentials by helping you store, retrieve, and inject secrets from 1Password instead of copying them into plaintext environment variables or files.
OP_SERVICE_ACCOUNT_TOKEN for non-interactive automation of op read, op inject, and op run.op signin with approval prompts and stable authenticated sessions for terminal workflows.OP_CONNECT_HOST and OP_CONNECT_TOKEN.op inject and runs commands with secret-bearing environment variables using op run.Configure the service account token by setting OP_SERVICE_ACCOUNT_TOKEN in ~/.hermes/.env, then verify access with op whoami.
High-intent search queries and answers about installing and using this skill.
You can inject secrets into configuration files using the `op inject` command. This replaces plaintext credential variables in your templates with actual secret references, preventing sensitive values from being exposed in your local environment.
Use a service account token for non-interactive secret access in CI/CD automation. Set the `OP_SERVICE_ACCOUNT_TOKEN` environment variable to authenticate `op read`, `op inject`, and `op run` commands automatically without requiring manual sign-in prompts.
Yes, you can run commands with secret-bearing environment variables using `op run`. It retrieves the specified credentials securely and passes them to your application process, ensuring raw secrets are never printed directly to the terminal.
Yes, 1Password CLI supports self-hosted Connect endpoints. Configure the `OP_CONNECT_HOST` and `OP_CONNECT_TOKEN` environment variables to authenticate and retrieve secrets directly from your own Connect server infrastructure.
A key limitation is the strict requirement to avoid printing raw secrets to logs. You must adhere to operational guardrails when using `op read` or `op inject` to ensure sensitive credentials are never accidentally exposed in terminal output or CI logs.
twjarviszyra-webConfigure 1Password CLI authentication and inject secret references into terminal commands.
afel6Inject secrets into commands using the 1Password CLI.
carterwayneskhizeineManage 1Password CLI secrets via read, inject, and command execution workflows.
AraflyAudit secret storage, injection, rotation, and protection without exposing values.