1password

What This Skill Does

The 1password skill enables the OpenClaw AI agent to securely interact with the 1Password CLI (op) to manage credentials, secrets, and identity authentication. By leveraging the 1Password desktop application integration, this skill allows the agent to read, inject, and execute secrets without hardcoding sensitive information into your environment or logs. It enforces a strict security posture by requiring all op commands to be executed within isolated tmux sessions, ensuring that session states, authentication tokens, and command outputs are handled securely and contextually.

Installation

To integrate this skill into your OpenClaw environment, execute the following command in your terminal: clawhub install openclaw/skills/skills/daggerkun007/1password-1-0-1

Before running, ensure the 1Password CLI is installed on your host system and that the desktop app integration is enabled via the 1Password application settings. The skill relies on standard op binaries and will verify presence via op --version before execution.

Use Cases

• Automated Secret Injection: Automatically pull API keys or database credentials for CI/CD tasks or local scripts using op run or op inject.
• Multi-Account Management: Seamlessly switch between personal and professional 1Password accounts using the --account flag or OP_ACCOUNT environment variable.
• Security Auditing: Query vault contents or verify current login status securely without manual credential entry.
• Environment Setup: Safely configure development environments by fetching necessary credentials on-demand, reducing the risk of plaintext files containing secrets.

Example Prompts

1. "Check if I am currently signed into my work 1Password account and list the available vaults."
2. "Inject the AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY from my development vault into this script execution."
3. "Rotate the API keys for the production database; use the 1Password CLI to update the existing entry."

Tips & Limitations

• Always use Tmux: The skill enforces tmux usage to prevent command leaking and handle interactive prompts. Never bypass this mechanism.
• Security First: Never ask the AI to log or print the raw output of sensitive secrets. Always use op run or op inject to pipe data directly into required applications.
• Desktop Sync: Ensure the 1Password desktop application is unlocked, as the CLI relies on the local secure connection to the primary vault.