Install the "1password" agent skill from https://github.com/HybridAIOne/hybridclaw/tree/main/skills/1password into .claude/skills/1password/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "1password", then confirm the skill loads.
Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Type this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
skills CLI
$ npx skills add HybridAIOne/hybridclaw --skill 1password -a codex
Project install goes to .agents/skills/; add -g for ~/.codex/skills/.
Install the "1password" agent skill from https://github.com/HybridAIOne/hybridclaw/tree/main/skills/1password into .agents/skills/1password/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "1password", then confirm the skill loads.
Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
skills CLI
$ npx skills add HybridAIOne/hybridclaw --skill 1password -a cursor
Project install goes to .agents/skills/; add -g for ~/.cursor/skills/.
Install the "1password" agent skill from https://github.com/HybridAIOne/hybridclaw/tree/main/skills/1password into .cursor/skills/1password/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "1password", then confirm the skill loads.
Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
skills CLI
$ npx skills add HybridAIOne/hybridclaw --skill 1password -a gemini-cli
Project install goes to .agents/skills/; add -g for ~/.gemini/skills/.
Install the "1password" agent skill from https://github.com/HybridAIOne/hybridclaw/tree/main/skills/1password into .gemini/skills/1password/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "1password", then confirm the skill loads.
Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Installs for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
skills CLI
$ npx skills add HybridAIOne/hybridclaw --skill 1password -a github-copilot
Project install goes to .agents/skills/; add -g for ~/.copilot/skills/.
Install the "1password" agent skill from https://github.com/HybridAIOne/hybridclaw/tree/main/skills/1password into .github/skills/1password/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "1password", then confirm the skill loads.
GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
skills CLI
$ npx skills add HybridAIOne/hybridclaw --skill 1password -a opencode
OpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
Install the "1password" agent skill from https://github.com/HybridAIOne/hybridclaw/tree/main/skills/1password into .opencode/skills/1password/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "1password", then confirm the skill loads.
OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
Skill name
1password
GitHub stars
159
Token cost
~613 tokens
SKILL.md length
217 words
Files
1
Skills in repo
72
Repo updated
First seen
Licence
MIT
At a glance
Install and use 1Password CLI (op) to sign in, inspect vault items, read secrets safely, and inject secrets into commands.
Works in 5 steps: Check whether op is installed → If it is missing, tell the user to run → Verify sign-in state → …
Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
What it does
1password is an agent skill from HybridAIOne/hybridclaw. Install and use 1Password CLI (op) to sign in, inspect vault items, read secrets safely, and inject secrets into commands.
Its SKILL.md is about 610 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
The repository describes itself as: Enterprise-ready self-hosted AI assistant runtime with sandboxed execution, secure credentials, approvals, and memory. The licence is MIT.
Example prompts
“/1password”
Workflow steps
5 steps, taken from the first numbered list in SKILL.md.
1Check whether op is installed
2If it is missing, tell the user to run
3Verify sign-in state
4Confirm the exact vault and item before reading any secret.
5Prefer secret injection over copying values into files or chat.
What it can do on your machine
Read from SKILL.md and the folder at commit 8162701. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md (its code samples are bash).
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
1password loads about 613 tokens when it runs. Until then it costs about 34 tokens; SKILL.md has 217 words of instructions outside code blocks.
Always· name and description, kept in context so the agent knows when to use it
~34
When it runs· the whole SKILL.md, loaded when a task matches
~613
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check: notes
The automated check noted patterns worth knowing about, such as sudo or a known installer.
NoteMentions a .env fileSKILL.md:77
op run --env-file=.env.1password -- your-command
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
Download SKILL.mdSave it as .claude/skills/1password/SKILL.md (or your agent's skills folder).
name
1password
description
Install and use 1Password CLI (`op`) to sign in, inspect vault items, read secrets safely, and inject secrets into commands.
user-invocable
true
requires.bins
op
1Password CLI
Use this skill for host-side secret workflows with 1Password CLI.
Default Workflow
Check whether op is installed:bash
op --version
If it is missing, tell the user to run:bash
hybridclaw skill install 1password op
or install it manually.
Verify sign-in state:bash
op whoami
op vault list
Confirm the exact vault and item before reading any secret.
Prefer secret injection over copying values into files or chat.
Safe Read Patterns
List items:
bash
op item list --vault "Engineering"
Inspect an item without dumping every field:
bash
op item get "Prod API" --vault "Engineering"
Read one field only:
bash
op item get "Prod API" --vault "Engineering" --fields label=password
Read by secret reference:
bash
op read "op://Engineering/Prod API/password"
Safe Injection Patterns
Run a command with secrets injected:
bash
op run --env-file=.env.1password -- your-command
Inject a template into a throwaway runtime file:
bash
RUNTIME_ENV="$(mktemp /tmp/runtime.env.XXXXXX)"
chmod 600 "$RUNTIME_ENV"
trap 'rm -f "$RUNTIME_ENV"' EXIT INT TERM
op inject -i .env.template -o "$RUNTIME_ENV"
Prefer /tmp or an untracked runtime path. Do not inject into tracked files unless the user explicitly asks. If you are done before the shell exits, run rm -f "$RUNTIME_ENV" and trap - EXIT INT TERM.
Rules
Never paste a secret value into chat unless the user explicitly requests it and there is no safer option.
Never commit, log, or echo secrets into shell history on purpose.
Default to read-only operations. Creating or editing vault items needs explicit user confirmation.
If op whoami fails, stop and tell the user they need to unlock the desktop app or sign in again.
If the task only needs a secret for one command, use op run instead of reading the secret into plain text.
1password next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
Review documents for signature or prepare a signing packet; verify fields and recipients while keeping sending and signing under explicit user authorization.
A skill your agent uses when inspecting Blender characters, rigs, poses, animation retargeting, ground contact, facing direction, or model-vs-motion alignment where screenshots alone are not enough.
Create and revise editable .excalidraw diagrams as Excalidraw JSON for architecture diagrams, flowcharts, sequence diagrams, concept maps, and other hand-drawn explainers.
Manage Google Ads accounts with safe GAQL reporting, campaign planning, guarded mutations, and gateway-proxied REST API calls.
159 GitHub stars~4k tokensUpdated today
Auto-check passed
Questions about 1password
What does 1password do?
Install and use 1Password CLI (op) to sign in, inspect vault items, read secrets safely, and inject secrets into commands. 1password is an agent skill from HybridAIOne/hybridclaw. Install and use 1Password CLI (op) to sign in, inspect vault items, read secrets safely, and inject secrets into commands.
How do I install 1password in Claude Code?
Run `npx skills add HybridAIOne/hybridclaw --skill 1password -a claude-code`. Or copy the skill folder (skills/1password in HybridAIOne/hybridclaw) into .claude/skills/1password in your project. Claude Code loads it when a task matches its description.
How do I install 1password in Codex?
Run `npx skills add HybridAIOne/hybridclaw --skill 1password -a codex`. Or copy the skill folder (skills/1password in HybridAIOne/hybridclaw) into .agents/skills/1password in your project. Codex loads it when a task matches its description.
Can I use 1password in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add HybridAIOne/hybridclaw --skill 1password -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/1password, .gemini/skills/1password, .github/skills/1password and .opencode/skills/1password in your project.
What does 1password need to run?
SKILL.md names no scripts, command-line tools or credentials: 1password is instructions for the agent only.
Does 1password access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is 1password safe to install?
Our automated static check of SKILL.md found notes only (mentions a .env file), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.
What licence does 1password use?
1password is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does 1password use?
About 613 tokens (SKILL.md is roughly 2.5k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to 1password?
Skills that share tags, products or a category with 1password: Node Inspect Debugger (openclaw/openclaw, 392k stars), Document Signing (asgeirtj/system_prompts_leaks, 69k stars), Obsidian Vault Maintainer (openclaw/openclaw, 392k stars) and Hashicorp Vault (sickn33/agentic-awesome-skills, 47k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains 1password?
HybridAIOne (a GitHub organization) maintains it in HybridAIOne/hybridclaw, which has 159 GitHub stars. The repository holds 72 skills in this directory. The repository was last updated on October 9, 2026.
Source: HybridAIOne/hybridclaw on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.
