Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
Require tmux session for op auth
What This Skill Does
Handles installing and configuring the 1Password CLI (op) and integrating it with the 1Password desktop app. Covers single and multi-account sign-in flows, reading vault items, and injecting secrets into processes without writing them to disk.
Using op run and op inject keeps secrets out of shell history, environment files, and logs without any extra tooling.
When to use it
- Injecting API keys from a vault into a deploy script
- Signing into multiple 1Password accounts from the terminal
- Running commands with secrets via op run without touching disk
- Setting up 1Password CLI on a new machine
- Verifying vault access before automated secret reads
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Run my deploy script with AWS credentials from 1Password
- 1Check op --version to confirm CLI is installed
- 2Verify desktop app integration is enabled and app is unlocked
- 3Create a fresh tmux session with a unique socket and session name
- 4Run op signin inside tmux and authorize in the desktop app
- 5Execute the deploy script via op run -- ./deploy.sh to inject secrets
Deploy script runs with AWS credentials injected directly from the 1Password vault, nothing written to disk
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.