LaunchKit · 2026
Back to Skills

secure-autofill

1Password-backed credential filling via vault_suggest/vault_fill (plugin tools).

0
360 downloads
by @moodykong

Setup & Installation

openclaw skills install @moodykong/secure-autofill

Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:

npx clawhub install secure-autofill

What This Skill Does

Provides credential filling for browser login flows using 1Password as the secret store. The agent handles navigation and DOM element identification; the plugin injects credentials directly so the agent never sees them. Supports username, password, email, and TOTP fields with retry logic for failed attempts.

Credentials never pass through the agent context, so automating login flows does not expose secrets in conversation history or logs.

When to use it

  • Logging into a website using stored 1Password credentials
  • Completing MFA login with a fresh TOTP code from 1Password
  • Retrying login with the next matching vault item when credentials are wrong
  • Dismissing cookie banners or passkey dialogs before credential injection
  • Automating multi-step login flows like X.com that split username and password across screens

Example Workflow

Here's how your AI assistant might use this skill in practice.

INPUT

User asks: log into x.com

AGENT
  1. 1Navigate to x.com/i/flow/login
  2. 2Take browser snapshot to identify the username field ref
  3. 3Call vault_fill with item_title 'X' and the username field ref, then click Next
  4. 4Detect and dismiss passkey error dialog from snapshot, then take new snapshot
  5. 5Call vault_fill for the password field ref, click Log in, then call vault_fill for OTP field ref and click Next
OUTPUT

Agent confirms home feed is visible and login is complete

Requirements

Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.

1Password account with credentials stored in a vaultOP_SERVICE_ACCOUNT_TOKEN environment variable (1Password service account token)