Skip to content

feat(skills): add official optional 1password skill#883

Merged
teknium1 merged 1 commit intoNousResearch:mainfrom
arceus77-7:feat/optional-1password-skill
Mar 13, 2026
Merged

feat(skills): add official optional 1password skill#883
teknium1 merged 1 commit intoNousResearch:mainfrom
arceus77-7:feat/optional-1password-skill

Conversation

@arceus77-7
Copy link
Copy Markdown
Contributor

@arceus77-7 arceus77-7 commented Mar 11, 2026

What does this PR do?

Adds a new official optional skill for 1Password CLI (op) under optional-skills/security/1password.

The skill documents install/auth flows, Hermes-safe execution guidance (tmux session pattern), and safe examples for op read, op inject, and op run.

Type of Change

  • ✨ Feature (new skill)
  • 📚 Documentation/content update

Changes Made

  • Added optional-skills/security/1password/SKILL.md
    • Includes prerequisites, setup, and usage guidance for 1Password CLI
    • Includes Hermes reliability guidance for running op commands in tmux
    • Includes guardrails for secret handling
  • Added optional-skills/security/1password/references/get-started.md
  • Added optional-skills/security/1password/references/cli-examples.md
  • Set metadata author to Hermes Agent to match existing skill conventions.
  • Updated op run examples to avoid printing secret values (scanner-safe examples).

How to Test

I tested this end-to-end on macOS in a local clone:

  1. Discoverability:
    • venv/bin/hermes skills search 1password
    • Verify result appears as official/security/1password.
  2. Inspect:
    • venv/bin/hermes skills inspect official/security/1password
  3. Install:
    • printf 'y\n' | venv/bin/hermes skills install official/security/1password
    • Verify scan verdict is SAFE.
  4. Verify installed listing:
    • venv/bin/hermes skills list --source all
    • Confirm 1password appears as Source=official.
  5. Runtime load smoke test:
    • venv/bin/hermes chat -t skills -q "Use the 1password skill and answer in one sentence: should op commands be run in tmux for Hermes reliability?"
    • Confirm skill load + guidance response.

Checklist

Code

  • I've read the Contributing Guide
  • Commit message follows Conventional Commits
  • PR contains only this scoped skill addition
  • Tested on macOS

Documentation & Housekeeping

  • This PR is skill-content only; no runtime/tooling code changes
  • No secrets or tokens are committed (examples/placeholders only)
@teknium1 teknium1 merged commit 808d81f into NousResearch:main Mar 13, 2026
teknium1 added a commit that referenced this pull request Mar 13, 2026
…broken examples

Follow-up to PR #883 (arceus77-7):

- Add setup.collect_secrets for OP_SERVICE_ACCOUNT_TOKEN so the skill
  prompts users to configure their token on first load
- Fix broken code examples: garbled op run export line, truncated
  secret reference in cli-examples.md
- Add Authentication Methods section documenting all 3 auth flows
  (service account, desktop app, connect server) with service account
  recommended for Hermes
- Clarify tmux pattern is only needed for desktop app flow, not
  service account token flow
- Credit original author (arceus77-7) in frontmatter
- Add DESCRIPTION.md for security/ category

Co-authored-by: arceus77-7 <arceus77-7@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants