skills.rest
azaanaliraza
azaanalirazaCOMMUNITY
Explore all skills by this author →
GitHub

1password

Configure 1Password CLI and read or inject secrets into commands and templates.

Updated Apr 18, 2026
Search Tags:#security#authentication#secrets management#environment variables#1password#op cli#credential injection
One-click install
npx skills add https://github.com/azaanaliraza/operarius --skill 1password-azaanaliraza
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/azaanaliraza/operarius/tree/main/src-tauri/bin/hermes/optional-skills/security/1password
Command: npx skills add https://github.com/azaanaliraza/operarius --skill 1password-azaanaliraza

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Managing secrets through plaintext environment variables or files is risky and hard to maintain. This Skill sets up the 1Password CLI (op) so secrets are read, injected, or passed to commands directly from a 1Password vault. ## Core Features & Use Cases - CLI Setup and Authentication: Install the op CLI and authenticate via service account token, desktop app integration, or a self-hosted Connect server. - Secret Operations: Read secret references like op://Vault/Item/field, fetch one-time passwords, inject secrets into templates with op inject, and run commands with secret env vars via op run. - Stable Hermes Sessions: Use a dedicated tmux session to preserve desktop-app sign-in state across non-interactive terminal calls. - Use Case: A developer needs a database password for a deployment script. Instead of pasting it into a .env file, they run the command through op run so the secret is resolved at runtime from the 1Password vault. ## Quick Start Set up the 1Password CLI with a service account token and read the database password from my app-prod vault.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I read a secret with the 1Password CLI?▼

Use op read with a secret reference URI, for example op read "op://Vault/Item/field". You must be authenticated first via op signin, a service account token, or a Connect server.

How to inject secrets into a config file with op?▼

Pipe a template containing op:// references into op inject, for example echo "db_password: {{ op://app-prod/db/password }}" | op inject. You can also use op inject -i config.tpl.yml -o config.yml for file-based templates.

Can I use 1Password CLI in CI or headless environments?▼

Yes, authenticate with OP_SERVICE_ACCOUNT_TOKEN instead of interactive op signin. Service accounts require CLI v2.18.0 or later and support op read, op inject, and op run without the desktop app.

Why does op say account is not signed in?▼

The desktop app integration session was lost between terminal calls. Run op signin again inside the same tmux session, or switch to a service account token which persists automatically across calls.

What is the difference between op run and op inject?▼

op run executes a command with secret references resolved as environment variables at runtime, while op inject resolves references inside templates or stdin to produce rendered output. Prefer op run to avoid writing secrets into files.

Related Skills

Explore More Software Engineering Skills→
openclawopenclaw
385.7k

1password

Manage and retrieve secrets using the 1Password CLI.

Official
Intermediate
wtthorntonwtthornton
4

ops

Scan codebases and infrastructure for vulnerabilities and compliance gaps.

Community
Advanced
alirezarezvanialirezarezvani
25.3k

secrets-vault-manager

Configure HashiCorp Vault and cloud secret stores with rotation, audit, and incident response workflows.

Community
Advanced
Tonybleything76Tonybleything76

Env & Secrets Manager

Manage environment variables and secrets across application lifecycles.

Community
Advanced