1password

Name: 1password
Availability: InStock
Author: zangjeicy

Manages credentials and secrets via the 1Password CLI for secure injection.

Updated Jul 13, 2026

Search Tags:#devops #security #authentication #cli #secrets #1password

Ready to run

npx skills add https://github.com/zangjeicy/Hermes --skill 1password-zangjeicy

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/zangjeicy/Hermes/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/zangjeicy/Hermes --skill 1password-zangjeicy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill eliminates the security risk of storing sensitive credentials in plaintext files or environment variables by integrating the 1Password CLI directly into your workflow.

Core Features & Use Cases

Secret Injection: Safely inject secrets into configuration files or templates at runtime without writing them to disk.
Credential Retrieval: Fetch passwords, API keys, or OTP codes on-demand for automated tasks.
Use Case: When running a deployment script that requires a database password, use this skill to fetch the secret from your 1Password vault and pass it to the command securely via environment variables.

Quick Start

Use the 1password skill to read the database password from the app-prod vault and inject it into the current session.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I securely inject secrets into environment variables for deployment scripts?▼

To securely inject secrets into environment variables, this skill retrieves credentials via the 1Password CLI and populates your session at runtime without writing sensitive data to disk. It fetches passwords or API keys on-demand for automated tasks.

What is the best way to fetch API keys on-demand for automated DevOps workflows?▼

The best way to fetch API keys on-demand is by using this skill to query your 1Password vault through the CLI. It reads the required credentials and passes them securely to your commands, preventing plaintext storage in configuration files.

Do I need a service account token to manage credentials with the 1Password CLI?▼

Yes, you need a service account token or desktop app integration to authenticate with the 1Password CLI. This access method allows the skill to securely retrieve secrets and populate environment variables across your workflows.

Can I retrieve OTP codes from my vault for automated authentication tasks?▼

Yes, you can retrieve OTP codes for automated authentication. The skill queries the 1Password vault to fetch OTP codes on-demand, ensuring secure credential retrieval without storing sensitive authentication factors in plaintext files.

Why should I avoid storing plaintext credentials in configuration files?▼

Storing plaintext credentials in configuration files creates a security risk. This skill eliminates that risk by integrating the 1Password CLI to fetch secrets at runtime, securely injecting them into your environment variables without writing them to disk.

Does this 1password skill work with existing DevOps secrets management workflows?▼

Yes, this skill integrates with existing DevOps workflows by using the 1Password CLI for secure authentication and secret injection. It facilitates automated credential retrieval to safely populate environment variables across development and production environments.