A secure automation skill for managing 1Password CLI operations and secret injection within AI agent workflows.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install test-skill2123
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install test-skill2123 using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is 1Password?
The 1Password skill for Openclaw Skills provides a professional framework for AI agents to interact with the 1Password CLI (op). It focuses on secure installation, desktop app integration, and handling the complex TTY requirements of CLI authentication. By using this skill, developers can ensure their AI agents access sensitive credentials through official, biometric-backed channels without exposing raw secrets in chat logs or codebases.
This implementation prioritizes security best practices, such as leveraging op run and op inject to keep secrets out of persistent storage. It addresses the technical challenge of CLI prompts by utilizing dedicated tmux sessions, making it a robust choice for anyone building secure automation with Openclaw Skills.
1Password Use Cases
- Automating the injection of environment variables from 1Password vaults into development environments.
- Managing multi-account authentication for complex cloud infrastructure tasks.
- Securely fetching database credentials or API keys during automated deployment pipelines.
- Verifying identity and access permissions via op whoami in non-interactive agent shells.
How 1Password Works
- The skill identifies the host operating system and shell environment to ensure compatibility.
- It verifies the presence of the 1Password CLI (op) and checks the version.
- A dedicated tmux session is initialized with a unique socket and session name to handle the interactive sign-in flow.
- The agent executes op signin within the tmux session, triggering the 1Password desktop app for biometric or password authorization.
- Access is validated using op whoami to confirm the session is active and authorized.
- Secure commands like op vault list or op inject are executed within the protected session context.
- The tmux session is safely terminated and sockets are cleaned up to maintain system hygiene.
1Password Setup
To enable this skill, first ensure the 1Password CLI is installed. You can use the following command provided by Openclaw Skills:
brew install 1password-cli
After installation, enable CLI integration in your 1Password Desktop App under Settings > Developer. To verify the agent can communicate with the CLI, run:
op --version
1Password Data Schema & Taxonomy
| Component | Description |
|---|---|
| Binary | 1Password CLI (op) |
| Session Manager | tmux (for TTY persistence) |
| Socket Path | Custom directory defined by OPENCLAW_TMUX_SOCKET_DIR |
| Session Naming | op-auth-[timestamp] for isolation |
| Auth Methods | Desktop app integration or manual account addition |
1Password Advanced Features
- Isolated TTY handling using custom tmux sockets to prevent session interference.
- Support for multi-account management using the OP_ACCOUNT environment variable or --account flag.
- Diskless secret management using op run and op inject for high-security environments.
- Automated session capture and cleanup patterns specifically designed for AI agent shells.
SKILL.md
Loading
Related Openclaw Skills
Agent Address Protocol (AAP)
A standardized messaging and discovery protocol that allows AI agents to communicate, collaborate on tasks, and share information across different providers.
Playwright Commander
An advanced browser automation skill providing programmatic control over web interfaces using the Playwright framework.
Anemone Browser
A managed headful Chrome browser solution designed for Openclaw agents to bypass bot detection through VNC takeover and session isolation.
Douyin Keyword Search Scraper
An automated browser-based scraper that extracts video metadata and engagement statistics from Douyin search result pages using keywords.
xfire - Multi-Agent Adversarial Security Review
xfire leverages multiple AI agents in an adversarial debate to find and verify security vulnerabilities in your codebase.
Grupo Venus
A technical integration for AI agents to retrieve, parse, and interpret astrological data from the Grupo Venus platform.
Featured*
