tools-1password-cli

Automate secrets management and vault operations with the 1Password CLI.

Updated Feb 6, 2026
One-click install
npx skills add https://github.com/tjboudreaux/cc-skills-one-password-cli --skill tools-1password-cli
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: tools-1password-cli
Source: https://github.com/tjboudreaux/cc-skills-one-password-cli/tree/main/.factory/skills/tools-1password-cli
Command: npx skills add https://github.com/tjboudreaux/cc-skills-one-password-cli --skill tools-1password-cli

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers and operators securely manage secrets with the 1Password CLI, enabling automation and safer configuration in scripts and CI/CD pipelines.

Core Features & Use Cases

  • Secrets management: read, create, edit, and organize items in Vaults using op.
  • Environment injection and automation: inject secrets at runtime with op run and op inject.
  • CI/CD and shell plugins: automate credentials for GitHub Actions, GitLab CI, Docker, and third-party CLIs.
  • Service accounts and access control: create and manage non-interactive tokens for automation with clear expiry.
  • Template-driven document and item operations: leverage item templates and documents for repeatable setups.

Quick Start

Prerequisites: Install 1Password CLI and authenticate (op signin or OP_SERVICE_ACCOUNT_TOKEN). Then try a quick workflow:

  • Read a secret: op read "op://Private/API Keys/openai-key"
  • Inject into a script: export API_KEY="$(op read "op://Private/API Keys/openai-key")"
  • Run a command with secrets: op run -- ./deploy.sh

Frequently Asked Questions about tools-1password-cli

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I inject secrets into CI/CD pipelines using 1Password CLI?

Inject secrets into CI/CD pipelines using 1Password CLI commands like `op run` and `op inject` to securely populate environment variables at runtime. This automates credentials for GitHub Actions, GitLab CI, and Docker without hardcoding values.

What is the best way to manage non-interactive authentication for vault automation?

Manage non-interactive vault automation by creating service accounts with 1Password CLI. These accounts provide tokens for automated workflows with clear expiry, satisfying authentication requirements for scripts and pipelines.

Can I use 1Password CLI with shell plugins for third-party CLIs?

Yes, 1Password CLI works with shell plugins to automate credentials for third-party CLIs across development, testing, and production environments. This plugin-based integration streamlines authentication without exposing raw secrets to the host environment.

How do I read and organize vault items using the op command?

Read and organize vault items using the `op` command to retrieve, create, edit, and manage secrets. For example, running `op read` with a vault URI fetches specific credentials for immediate use in scripts or environment variables.

Do I need a service account token to run 1Password CLI in automation?

You need either an active session via `op signin` or an `OP_SERVICE_ACCOUNT_TOKEN` environment variable to run 1Password CLI in automation. Service accounts are required for non-interactive workflows in CI/CD pipelines.

When do I need environment templating for secrets management?

You need environment templating for secrets management when setting up repeatable configurations across multiple environments. The 1Password CLI leverages item templates and documents to standardize vault operations and ensure consistent secret injection.