Instructions for managing passwords, API keys, and other secrets with the 1Password command-line tool. It supports reading, creating, listing, and injecting secrets without putting their actual values in files or chat.

Use it to retrieve or create secrets, search vault items, prepare environment files with 1Password references, and supply credentials to approved command-line workflows.

It reduces the risk of exposing credentials in source code, logs, or messages. Other tools can use secret references that are resolved only when needed.

1password — Skill for Claude Code and Codex by OpenCoven/coven

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add OpenCoven/coven --skill 1password

Clone the repo

git clone --depth 1 https://github.com/OpenCoven/coven

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/opencoven/coven/1password/github.svg)](https://agentmods.dev/skills/opencoven/coven/1password)

Your own site

<a href="https://agentmods.dev/skills/opencoven/coven/1password"><img src="https://agentmods.dev/badge/skills/opencoven/coven/1password/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/opencoven/coven/1password"><img src="https://agentmods.dev/badge/skills/opencoven/coven/1password.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 50 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 991 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 2 findings, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

medium Rogue Agent · line 58
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
medium Data Exfiltration · line 79
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00050	$0.00991
Opus 5.5	$0.00020	$0.00396
Sonnet 5.5	$0.00010	$0.00198
Haiku 4.5	$0.00005	$0.00099

Measured 1mo ago against content hash e6e680014b7e, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

1password scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

Provides whitelisted access for other skills (ask-curl, GitHub, etc.)

skills/1password/SKILL.md · 141 lines

How it starts

The opening of the file, as written. The whole thing — 141 lines — stays where its author put it; the contents beside it link to each section on GitHub.

1Password Secret Management

Securely store and retrieve secrets. Never expose them in chat, logs, or files.

Prerequisites

op CLI installed: brew install --cask 1password-cli
Signed in: op signin (or service account via OP_SERVICE_ACCOUNT_TOKEN)
For biometric unlock: enable in 1Password desktop app → Settings → Developer → CLI integration

Core Commands

Read a secret

op read "op://VaultName/ItemName/FieldName"

List vaults

op vault list --format json | jq '.[].name'

List items in a vault

op item list --vault "Development" --format json | jq '.[].title'

Create an item

op item create \
  --category login \
  --vault "Development" \
  --title "Service API Key" \
  --field "credential=secret_value_here"

Search items

op item list --format json | jq '.[] | select(.title | test("github"; "i"))'

Environment Files (Secret References)

Create env files with op:// references — secrets are resolved at runtime, never stored on disk.

Setup for ask-curl

mkdir -p ~/.config/ask-curl

# Create env file with secret references (NOT actual secrets)
cat > ~/.config/ask-curl/env.curl << 'ENV'
GITHUB_TOKEN=op://Development/GitHub PAT/credential
OPENAI_API_KEY=op://Development/OpenAI/api key
SLACK_WEBHOOK=op://Development/Slack Webhook/url
ENV

Use with `op run`

# Inject secrets from env file into a command
op run --env-file=~/.config/ask-curl/env.curl -- curl -s \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  "https://api.github.com/user"

# Inject secrets into any command
op run --env-file=~/.config/ask-curl/env.curl -- node script.js

Skill Whitelisting

Control which skills can access which secrets by using separate env files per skill:

~/.config/ask-curl/env.curl       # HTTP/API secrets for ask-curl
~/.config/github/env.gh           # GitHub-specific secrets
~/.config/openclaw/env.gateway    # Gateway/infra secrets

Each env file contains only the op:// references that skill needs — principle of least privilege.

Read the full file on GitHub · 141 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

1mo ago First seen · 141 lines · 50 tokens per session scan A e6e680014b7e

Subscribe to this mod's changes

1password is a skill published in the GitHub repository OpenCoven/coven (73 stars, last pushed today), licensed MIT. It adds 50 tokens to every session and 991 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

1password Claude Code Security agent-orchestration ai-agents codex credentials env model-agnostic opencoven secrets

1password

Read, write and inject secrets with the 1Password CLI (op). Look up logins/API keys/SSH keys, resolve op:// secret references, run a command with secrets as env vars (op run), fill config templates (op inject), and create/edit items. Triggers on /1password, "get my API key", "what's the password for X", "put this…

olafkfreund/nixos_config · 121 tokens

agentsecrets

Zero-knowledge secrets infrastructure — AI agents manage the complete credential lifecycle without ever seeing values.

The-17/agentsecrets · 21 tokens

agentsecrets

Zero-knowledge secrets infrastructure — AI agents manage the complete credential lifecycle without ever seeing values.

LeoYeAI/openclaw-master-skills · 21 tokens

cred-omega

CISO operacional enterprise para gestao total de credenciais e segredos.

skillmds/skillmd · 19 tokens

cis-aws-compute-3.6

Ensure secrets are not passed as container environment variables in Amazon ECS task definitions.

CyberStrikeus/CyberStrike · 24 tokens

secrets-management-expert

Store, distribute, rotate and revoke credentials without ever placing them in source: vaults, cloud secret managers, KMS envelope encryption and dynamic credentials. Use when the user mentions secrets, API keys, credentials, HashiCorp Vault, KMS, key rotation, a leaked or committed secret, .env files, sealed secrets…

personamanagmentlayer/pcl · 96 tokens

1password

Getting it into your agent

Wrote this? Show the measurements

What it costs to keep this loaded

Grade A, and why

Makes network callslowCapability

How it starts

1Password Secret Management

Prerequisites

Core Commands

Read a secret

List vaults

List items in a vault

Create an item

Search items

Environment Files (Secret References)

Setup for ask-curl

Use with op run

Skill Whitelisting

What this file has done since we first saw it

Other skills, from other repositories

1password

agentsecrets

agentsecrets

cred-omega

cis-aws-compute-3.6

secrets-management-expert

Use with `op run`