Setup & Installation
openclaw skills install @moodykong/ssh-op
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
npx clawhub install ssh-op
What This Skill Does
ssh-op is a wrapper script that loads an SSH private key from 1Password into an in-memory ssh-agent before running ssh. No private key is written to disk. Configuration is portable via a skill-local config.env file.
Keeps private keys out of the filesystem by loading them into memory only for the duration of the shell session.
When to use it
- Connecting to a remote server using a 1Password-managed SSH key
- Setting up SSH access on a new machine without copying key files
- Running port-forwarding sessions with a key stored in 1Password
- Onboarding a teammate by sharing vault/item configuration
- Testing SSH host aliases defined in a managed ~/.ssh/config block
Example Workflow
Here's how your AI assistant might use this skill in practice.
INPUT
User asks: connect to my-server using the SSH key stored in 1Password
AGENT
- 1Check that op, ssh, ssh-agent, and ssh-add are available and op whoami succeeds
- 2Read SSH_OP_VAULT_NAME and SSH_OP_ITEM_TITLE from config.env
- 3Run op read to retrieve the private key and pipe it into ssh-add
- 4Exec ssh with the provided host alias and arguments
OUTPUT
Authenticated SSH session to my-server with no key written to disk
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.
1Password CLI (op) installed and signed in1Password account with a vault containing the SSH key itemOP_SERVICE_ACCOUNT_TOKEN environment variable if using a service account flow