1pw-env

仓库创建 2026年7月26日最近提交 3 天前SkillHot 收录 2 天前
▸ 精选理由

为 AI agent 与脚本提供受控的秘密注入和同步流程,减少凭证散落风险。

▸ 风险提示

需要访问 1Password 与执行注入操作,配置不当或安装脚本可能暴露高权限凭证。

这个 Skill 做什么

使用 1Password 环境变量系统集中管理并注入项目凭证与服务账号。

用 1Password 把项目所需的凭证集中管理并注入到运行环境,支持 op run 的零磁盘注入和把 vault 同步到 shell(如生成 ~/.env.mcp)的回退方案。常在设置 API key、服务账号、SSH agent 或给 AI agent 提供密钥时用,方便统一分发并减少泄露面。特色是把凭证当单一可信源,兼顾 SDK 使用、速率限制提醒和常见认证排错步骤。

▸ 展开 SKILL.md 英文原文

Manage credentials across all projects using the 1Password environment variable system. Handles op run zero-disk secret injection, syncing credentials from 1Password vault to shell environment, adding new credentials, service account setup for AI agents, SSH agent integration, SDK usage, rate limit awareness, and troubleshooting auth failures. Covers: 1Password vault → op run → subprocess (preferred) and vault → op CLI → ~/.env.1p.tpl → ~/.env.mcp → shell (fallback). MANDATORY TRIGGERS: 1password, credentials, env vars, environment variables, API key missing, auth failure, credential sync, op CLI, secrets management, .env.mcp, credential setup, new credential, Touch ID timeout, vault, shell plugins, biometric auth, service account, SDK, op run, SSH agent, rate limit, Connect Server, Environments, agentic autofill, OP_SERVICE_ACCOUNT_TOKEN, op run wrapper.

自动化集成1Password凭证管理op-runSSH集成通用
0
Stars
0
Forks
32
仓库内 Skill
+0
7 日增星
安装 / 使用
给你的 Agent 一句话(通用)
帮我安装这个 skill:https://raw.githubusercontent.com/fullREFIT/skills/main/skills/1pw-env/SKILL.md
或 curl 直取 SKILL.md
curl -fsSL "https://raw.githubusercontent.com/fullREFIT/skills/main/skills/1pw-env/SKILL.md"
SKILL.MD 节选查看完整文件 ↗
# 1Password Environment System Skill

Centralized credential management for all projects. One encrypted source of truth (1Password "Dev Credentials" vault) distributes 212+ credentials to Claude Code, MCP servers, AI agents, scripts, and workflows.

**Two delivery patterns. Use Pattern A by default.**


## Delivery Patterns

### Pattern A: `op run` — Zero-Disk Secrets (Preferred)

Spawns a subprocess with secrets injected as env vars. **Nothing written to disk.** stdout/stderr auto-masked. Requires biometric auth.

```bash
# Run any command with all credentials injected from template
op run --env-file ~/.env.1p.tpl -- node app.js
op run --env-file ~/.env.1p.tpl -- python main.py
op run --env
via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有