2password

A community CLI and Agent Skill by Kit Langton (kitlangton) that lets coding agents work with 1Password secrets safely. The agent finds and uses credentials through op:// references and never sees the values, and it asks you to approve far less often. It builds on the official 1Password CLI but isn't made by 1Password. What you can do with it - Find credentials by name, getting op:// references back instead of values - Run a command with secrets injected as environment variables, or from a .env template - Save a new API credential to a vault from the clipboard or a pipe - Batch lookups so many queries or env references need a single 1Password approval - Set up a dedicated vault and service account so routine use needs no prompts at all How it works - Install the CLI with bun add -g 2password and the skill with bunx skills add kitlangton/2password. It needs Bun and the 1Password CLI. - The skill teaches your agent to use 2password find, run, env run and create, and when to use each. - A service account token can live in the macOS Keychain, or in a DPAPI-encrypted file on Windows. Good to know - Only read and env resolve deliberately return a secret value. - run and env run pass plaintext secrets to the child process, which could print them, so use them only with commands you trust. - New secrets come in through the clipboard or a pipe, never as command arguments, and every write is read back and checked. - MIT licensed.