1Password CLI Helper

Trust Score 88/100

Securely operate the 1Password CLI for agent workflows: prefer secret references, least-privilege service accounts, and avoid exposing secrets in transcripts.

triggers:1passwordop clisecretssecret referencesop runop read

GitHub SKILL.md

What it does

This skill provides best-practice guidance and helper patterns for using the 1Password CLI (op) in automation and agent workflows. It explains safe access patterns, when to use secret references vs plaintext reads, how to run commands with injected secrets, and log/transcript hygiene to avoid leaking credentials.

When to use it

Use this skill whenever an agent or automation needs to access secrets for builds, deploys, or runtime configuration. It's relevant for: running subprocesses that require credentials, creating local env files with secret references, reading item metadata safely, and designing unattended service accounts.

What's included

Scripts: no dedicated scripts detected in the repo (has_scripts=false)
References: none found (has_references=false)
Instructions: explicit procedural guidance for op run --env-file, using op read safely, extracting reference IDs, and auditing for accidental secret commits. Also includes troubleshooting and failure handling steps.

Compatible agents

This skill is applicable to agent runtimes that can shell out or run CLI tools and that support secret injection: Copilot/Codex-style agents, automation runners that use service accounts, and CLI-capable bots.

Audit Summary

1Password CLI helper skill providing security-focused guidance for agent credential workflows. No bundled scripts — purely instructional SKILL.md covering op run, secret references, service accounts, and transcript hygiene. Well-structured with clear decision trees and failure handling. Strongly promotes least-privilege access and secret redaction, making it one of the more security-conscious skills audited.

Watch Out

Requires 1Password CLI (op) to be installed and authenticated
Service account token must be injected via runtime secrets, not stored in config

Notes

Documentation-only skill with no executable scripts. Exceptional security posture — the skill itself teaches secure patterns and actively discourages secret exposure. Could benefit from a references/ directory with example .env.op files.

Information

Repository: skills
Stars: 9

Trust Score

Overall88

Security97

Code Quality82

Architecture72

Usefulness68

Related Skills

Development Worktree

Create an isolated git worktree for feature work, auto-run project setup, and verify a clean test baseline before development.

Readwise Reader Document Management

Manage Readwise Reader documents: list, save, search, move, tag, highlight, export and bulk-edit via official and custom CLIs.

Bounty Hunter — Atlas

Persona skill: 'Atlas' — a profit-focused developer persona for discovering, evaluating and executing paid bounties or freelance tasks with ROI-aware workflows.

Junshi — Research Advisor

Daily strategic research advisor that scans arXiv/venues, digests papers, and proposes bold, ranked research ideas tailored to the user's profile.

TradeOS

Natural-language driven CEX trading and portfolio management for agents: API key vaulting, multi-exchange orders, DCA, arbitrage scanning, alerts and security r

Full Stack Builder

End-to-end builder that scaffolds, implements, tests, and optionally deploys web and API applications from a natural-language specification.

ezBookkeeping API Tools

Command-line API tools for ezBookkeeping: record and query transactions, retrieve accounts/categories/tags, and fetch exchange rates for self-hosted personal fi

Feishu Voice Sender

Convert MP3s and send them as native Feishu voice messages (playable voice clips) to users or groups.

Back to Skills