1Password CLI

Use this skill when the user wants secrets managed through 1Password instead of plaintext env vars or files.

Requirements

• 1Password account
• 1Password CLI (op) installed
• One of: desktop app integration, service account token (OP_SERVICE_ACCOUNT_TOKEN), or Connect server
• tmux available for stable authenticated sessions during Hermes terminal calls (desktop app flow only)

When to Use

• Install or configure 1Password CLI
• Sign in with op signin
• Read secret references like op://Vault/Item/field
• Inject secrets into config/templates using op inject
• Run commands with secret env vars via op run