Automate secure web logins using 1Password credentials while keeping secrets private from the AI agent.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install secure-autofill
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install secure-autofill using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Secure Autofill (1Password Integration)?
The Secure Autofill skill provides a robust bridge between AI agents and 1Password, allowing for seamless credential management during browser automation tasks. By utilizing the vault_suggest and vault_fill tools, this skill ensures that sensitive data like passwords and TOTP codes are injected directly into the browser DOM by the plugin, meaning the AI agent never actually sees the raw secrets.
It is specifically designed for environments where security is paramount, leveraging 1Password service accounts and non-headless Chrome instances to bypass automation detection and maintain a high security posture. This is a critical addition to your collection of Openclaw Skills for any developer focusing on secure web workflows.
Secure Autofill (1Password Integration) Use Cases
- Automating logins to platforms like X (Twitter), GitHub, or AWS without hardcoding credentials.
- Handling Multi-Factor Authentication (MFA) using TOTP codes stored in 1Password.
- Bypassing bot detection by using non-headless Chrome for authenticated sessions.
- Managing multiple sets of credentials across different environments using 1Password vaults.
How Secure Autofill (1Password Integration) Works
- The AI agent navigates to a login page and takes a browser snapshot to identify input fields.
- The agent uses vault_suggest to find the relevant 1Password item based on the site.
- A mapping of DOM element references to credential types (username, password, otp) is created.
- The vault_fill tool is called, instructing the plugin to securely type secrets into the identified fields.
- The agent clicks the submit button and monitors the page for success or further obstacles like MFA.
Secure Autofill (1Password Integration) Setup
Install Google Chrome on your WSL environment:
wget -qO- https://dl.google.com/linux/linux_signing_key.pub | sudo gpg --dearmor -o /usr/share/keyrings/google-linux-signing-keyring.gpg
echo "deb [arch=amd64 signed-by=/usr/share/keyrings/google-linux-signing-keyring.gpg] http://dl.google.com/linux/chrome/deb/ stable main" | sudo tee /etc/apt/sources.list.d/google-chrome.list
sudo apt update && sudo apt install -y google-chrome-stable
Run the interactive onboarding script to configure environment variables:
~/.openclaw/skills/secure-autofill/scripts/onboard.sh
Enable the tools in your configuration by adding them to the allowlist in your Openclaw Skills setup within ~/.openclaw/openclaw.json.
Secure Autofill (1Password Integration) Data Schema & Taxonomy
The skill utilizes specific field mappings to interact with the 1Password vault through the following schema:
| Field Type | Description |
|---|---|
username |
Maps to the 1Password "username" field. |
password |
Maps to the 1Password "password" field. |
email |
Maps to "email" or falls back to "username". |
otp |
Generates a fresh TOTP code from the vault. |
It also manages state via retry modes: simple (retry same credentials), next_candidate (try next matching item), and reset (clear state).
Secure Autofill (1Password Integration) Advanced Features
- Multi-Factor Authentication support for TOTP, SMS, and Push notifications.
- Intelligent retry logic with next_candidate to cycle through multiple matching credentials.
- Non-headless browser support to ensure compatibility with high-security websites.
- Service account integration via OP_SERVICE_ACCOUNT_TOKEN for automated, non-interactive vault access.
- DOM-ref based filling ensures the agent orchestrates the workflow without ever reading sensitive strings.
SKILL.md
Loading
Related Openclaw Skills
queue-task
A durable queue-task helper designed for resumable and idempotent batch processing in task-father environments.
OneDrive Integration
A specialized tool for AI agents to automatically move and rename local files to Microsoft OneDrive for seamless sharing on mobile chat platforms.
Tavily Search
Integrate real-time web search capabilities into your AI agents using the Tavily API for highly relevant, structured data retrieval.
Firecrawl Scraper
A powerful web scraping and crawling tool that utilizes the Firecrawl API to transform websites into clean, structured data optimized for AI applications.
Secure Shopper
An asynchronous AI shopping assistant that researches products across multiple sites and performs secure checkouts using 1Password-backed automation.
Skill Father
The definitive framework for building portable, reproducible, and production-ready Openclaw Skills with guided onboarding flows.
Featured*
