1password

Set up the 1Password CLI to read, inject, and run commands with secrets.

4|Updated May 18, 2026
One-click install
npx skills add https://github.com/ZardLi1115/zedclaw --skill 1password-zardli1115
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/ZardLi1115/zedclaw/tree/main/optional-skills/security/1password
Command: npx skills add https://github.com/ZardLi1115/zedclaw --skill 1password-zardli1115

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill prevents leaking credentials by helping you set up and use the 1Password CLI (op) to securely store, retrieve, and inject secrets for automation.

Core Features & Use Cases

  • Service account secret flow: Use OP_SERVICE_ACCOUNT_TOKEN to authenticate non-interactively for CLI operations like reading secrets, injecting them into templates, and running commands with secret-backed environment variables.
  • Desktop app integration: Enable interactive op signin with tmux to keep authentication context stable across ZedClaw terminal calls.
  • Connect server support: Use self-hosted Connect with OP_CONNECT_HOST and OP_CONNECT_TOKEN for compatible environments.
  • Common operations: Read secrets via op read, inject secret values into templates via op inject, and execute commands safely with op run.

Quick Start

Ask the agent to set up the 1Password CLI using your service account token in OP_SERVICE_ACCOUNT_TOKEN and then read a secret reference to confirm it works.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely inject secrets into CI pipelines without exposing raw values?

You can securely inject secrets by setting up the 1Password CLI with a service account token, then using `op inject` to render secret values into configuration templates. This ensures raw credentials are never printed to your terminal logs.

What is the best way to run terminal automation commands with secret-backed environment variables?

The `op run` command executes terminal automation commands while securely populating environment variables with retrieved credentials. It reads secret references and passes them directly to your target process without exposing raw values.

Can I use 1Password CLI to authenticate non-interactively in headless environments?

Yes, you can authenticate non-interactively in headless environments by configuring the `OP_SERVICE_ACCOUNT_TOKEN` environment variable. This allows automated workflows to read secrets and execute commands without requiring interactive sign-in prompts.

How do I keep authentication context stable when using interactive op signin across terminal calls?

You can maintain stable authentication context for interactive `op signin` by enabling desktop app integration with tmux. This ensures your session remains active and synchronized across multiple terminal calls within your workflow.

Does 1Password CLI support self-hosted secret management for compatible environments?

Yes, 1Password CLI supports self-hosted environments through 1Password Connect. You configure your setup using the `OP_CONNECT_HOST` and `OP_CONNECT_TOKEN` variables to authenticate and retrieve secrets securely.