What problem does it solve? Managing secrets through plaintext environment variables or files is risky and hard to maintain. This Skill sets up the 1Password CLI (op) so secrets stay in your vault and are read, injected, or passed to commands only at runtime. ## Core Features & Use Cases - CLI Setup and Authentication: Install the op CLI and authenticate via service account token, desktop app integration, or a self-hosted Connect server. - Secret Operations: Read secrets with op:// references, fetch one-time passwords, inject secrets into templates with op inject, and run commands with secret env vars via op run. - Headless and CI Support: Use OP_SERVICE_ACCOUNT_TOKEN for non-interactive environments, or a dedicated tmux session to preserve desktop-app sign-in across terminal calls. - Use Case: You need a database password inside a deployment script without storing it in a file. Set the env var to an op:// reference and run the script through op run so the secret is resolved only at execution time. ## Quick Start Set up the 1Password CLI with a service account token and read the database password from my app-prod vault without printing it to the console.
