1Password

Authentication uses a 1Password service-account token in the macOS login keychain. The agent reads that token into a shell variable, then into op's environment. The real security boundary is a dedicated, read-only, vault-limited service account — not this skill's rules.

Never ask the user to paste a token into chat. Never run setup for them.

Each op snippet below is one complete script. Run it in a single shell. Do not reuse $token in a later tool call.

One-time setup

The user runs this in their own Terminal and pastes the ops_... token at the prompt. The subshell exits on a failed or empty read so security never runs; EOF or a blank paste cannot overwrite an existing item.