op

Manage and retrieve 1Password secrets via the op CLI.

3|1|Updated Dec 3, 2025
One-click install
npx skills add https://github.com/nsheaps/ai-mktpl --skill op-nsheaps
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: op
Source: https://github.com/nsheaps/ai-mktpl/tree/main/plugins/1pass/skills/op
Command: npx skills add https://github.com/nsheaps/ai-mktpl --skill op-nsheaps

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill removes friction around retrieving, injecting, and managing 1Password secrets from terminal workflows so developers and automation can access credentials securely without exposing plaintext secrets.

Core Features & Use Cases

  • Authentication & Service Accounts: Sign in interactively or use service account tokens for CI and automation.
  • Secret Retrieval & Injection: Read individual fields, inject secrets into environment variables or template files, and run commands with secrets injected.
  • Item & Vault Management: List, get, create, edit, and delete items and vaults with JSON output and filtering by category or tags.
  • Use Case: Inject a database password from a vault into a Docker Compose environment at startup or fetch an API key during a CI job.

Quick Start

Retrieve the production database password from the Private vault and run your application with that password injected into the environment.

Frequently Asked Questions about op

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I retrieve 1Password secrets from the command line?

Retrieve 1Password secrets from the command line by signing in interactively or using service account tokens, then reading individual fields or injecting them into environment variables for secure local workflows.

Can I inject 1Password secrets into environment variables or config templates?

Yes, you can inject 1Password secrets into environment variables or config templates using CLI operations. This allows you to populate Docker Compose files or run commands with secrets securely injected at startup.

How do I use 1Password service accounts for CI and automation?

Use 1Password service accounts for CI and automation by authenticating with service account tokens. This enables automated secret retrieval and injection into CI jobs without exposing plaintext credentials.

Does the op CLI support listing and editing vault items with JSON output?

Yes, the op CLI supports listing, getting, creating, editing, and deleting vault items with JSON-formatted output. You can filter items by category or tags to manage secrets effectively.

What is the best way to manage secrets in automated workflows without plaintext exposure?

Manage secrets in automated workflows without plaintext exposure by using CLI-based secret retrieval and injection. Fetch credentials on demand during CI jobs or application startup using service account authentication.

Can I run commands with 1Password secrets injected dynamically?

Yes, you can run commands with 1Password secrets injected dynamically. The CLI supports reading secrets and injecting them directly into command execution environments, ensuring credentials are available securely at runtime.