1password

Integrate 1Password CLI into Hermes workflows for secret management.

Updated May 23, 2026
One-click install
npx skills add https://github.com/zengbaocheng/hermes-tech-hub --skill 1password-zengbaocheng
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/zengbaocheng/hermes-tech-hub/tree/main/security/1password
Command: npx skills add https://github.com/zengbaocheng/hermes-tech-hub --skill 1password-zengbaocheng

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Centralize and secure secret management by using 1Password CLI within Hermes, eliminating plaintext secrets and improving access control.

Core Features & Use Cases

  • Install and configure the 1Password CLI (op) and sign in via desktop app integration or service accounts.
  • Read secrets from op:// paths, inject them into templates, and run commands with secret env vars.
  • Use Hermes to manage secret access across local terminals and non-interactive sessions with reliability.

Quick Start

Install the 1Password CLI, sign in via desktop app integration or a service account, then read secrets with op read.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage secrets in automated terminal workflows without storing plaintext?

Inject secrets into terminal workflows by integrating the 1Password CLI to read op:// paths and populate environment variables dynamically. This centralizes access control and eliminates the need to store plaintext credentials in local configuration files.

Can I use 1Password CLI to inject secrets into commands run in non-interactive sessions?

Yes, you can execute commands with secret environment variables in non-interactive Hermes sessions. The integration ensures tmux session reliability, allowing automated scripts to securely access and inject secrets without requiring manual authentication prompts.

What do I need to configure before reading secrets from op:// paths in my terminal?

You must install the 1Password CLI and authenticate via desktop app integration, a service account, or a Connect server. This setup allows you to securely resolve op:// paths and inject credentials into your terminal commands and templates.

Why does my non-interactive Hermes session fail to retrieve 1Password secrets?

Non-interactive Hermes sessions fail to retrieve secrets when tmux session reliability is not ensured or authentication is not properly configured. You must use service accounts or Connect server authentication to maintain stable background access without interactive desktop prompts.

Is there a way to use 1Password service accounts for local terminal automation?

Yes, local terminal automation is supported using 1Password service accounts. This allows you to authenticate the CLI in headless environments or scripts, securely reading secrets and injecting them into commands without relying on desktop app integration.