skills.rest
Lento47
Lento47COMMUNITY
Explore all skills by this author →
GitHub

1password

Configure 1Password CLI and inject secrets into commands using op references.

1|Updated Jun 19, 2026
Search Tags:#authentication#tmux#secrets management#1password#service account#op cli#secret injection
One-click install
npx skills add https://github.com/Lento47/arcana-community --skill 1password-lento47
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/Lento47/arcana-community/tree/main/skills/security/1password
Command: npx skills add https://github.com/Lento47/arcana-community --skill 1password-lento47

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Managing secrets through plaintext environment variables or config files exposes credentials and complicates rotation. This Skill sets up the 1Password CLI (op) so secrets are read, injected, or passed to commands directly from a 1Password vault. ## Core Features & Use Cases - CLI Setup and Authentication: Install op on macOS, Linux, or Windows and authenticate via desktop app integration, service account token, or Connect server. - Secret Operations: Read secrets with op:// references, fetch one-time passwords, inject secrets into templates with op inject, and run commands with secret env vars via op run. - Stable Agent Sessions: Use a dedicated tmux session pattern so desktop-app sign-in persists across non-interactive terminal calls. - Use Case: A developer needs a database password for a deployment script without storing it in a file. The Skill authenticates op with a service account token and runs the script with op run so the secret is injected only at runtime. ## Quick Start Set up the 1Password CLI with a service account token and read the database password from my app-prod vault.

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I use 1Password CLI to inject secrets into a command?▼

Use op run with environment variables set to op:// references, such as export DB_PASSWORD="op://app-prod/db/password" followed by op run -- your-command. The CLI resolves the references at runtime so secrets never touch files.

How to authenticate 1Password CLI in CI or headless environments?▼

Use a service account by setting the OP_SERVICE_ACCOUNT_TOKEN environment variable, which requires op CLI v2.18.0 or later. This avoids interactive op signin and supports op read, op inject, and op run without the desktop app.

Does 1Password CLI work without the desktop app?▼

Yes, via a service account token (OP_SERVICE_ACCOUNT_TOKEN) or a self-hosted Connect server with OP_CONNECT_HOST and OP_CONNECT_TOKEN. Desktop app integration is only needed for the interactive biometric sign-in flow.

Why does op fail with 'account is not signed in' in terminal automation?▼

Non-interactive terminal calls can lose auth context between invocations when using desktop app integration. Run op signin and subsequent commands inside a dedicated tmux session so the authenticated session persists.

How do I get a one-time password (OTP) from 1Password CLI?▼

Run op read with the OTP attribute reference, for example op read "op://app-prod/npm/one-time password?attribute=otp". This returns the current TOTP code for the vault item.

Related Skills

Explore More Software Engineering Skills→
mattstyles333mattstyles333

1password

Retrieve 1Password secrets and vault information via the op CLI.

Community
Intermediate
kaminocorpkaminocorp
1

1password

Configure 1Password CLI and read or inject secrets into commands and templates.

Official
Intermediate
ivanshamaevivanshamaev
14

infra-secrets-management-review

Audit Vault, Kubernetes, Airflow, dbt, and CI configurations for insecure secret patterns.

Community
Advanced
Tonybleything76Tonybleything76

Env & Secrets Manager

Manage environment variables and secrets across application lifecycles.

Community
Advanced