Secure 1Password CLI patterns for reading secrets, discovering vaults/items, and piping credentials to other tools. Use when reading from 1Password, rotating secrets, or piping credentials to wrangler/kubectl/etc. Triggers on op CLI, 1Password, secret rotation, or credential piping tasks.
98
Quality
100%
Does it follow best practices?
Impact
92%
2.13xAverage score across 3 eval scenarios
Passed
No known issues
Slash-title item discovery and wrangler piping
No op:// URI used
100%
100%
Discovery via item list
0%
100%
Uses item ID for get
0%
100%
Direct pipe to wrangler
0%
100%
Uses npx wrangler
0%
100%
--reveal flag present
100%
100%
Stderr suppressed
0%
50%
No secret printed
100%
100%
Correct environment flag
100%
100%
Correct vault reference
100%
100%
Without context: $0.1849 · 48s · 12 turns · 19 in / 2,557 out tokens
With context: $0.2421 · 53s · 15 turns · 452 in / 2,794 out tokens
Multi-field discovery and kubectl secret creation
Field discovery command
41%
100%
python3 label extraction
0%
100%
No secrets from field discovery
100%
100%
kubectl piping pattern
0%
33%
dev/stdin usage
0%
0%
--reveal flag for field reads
0%
100%
Stderr suppressed
0%
100%
No secret printed
60%
100%
Correct item ID used
100%
100%
Correct vault referenced
100%
100%
Without context: $0.2770 · 1m 12s · 18 turns · 24 in / 3,298 out tokens
With context: $0.3555 · 1m 33s · 19 turns · 105 in / 4,510 out tokens
Secret verification and cross-vault comparison
eval op signin pattern
100%
100%
wc -c for non-empty check
0%
100%
wc -c applied to both items
0%
100%
cmp -s comparison
0%
100%
No values in output
0%
100%
--reveal on comparisons
0%
100%
Stderr suppressed on op commands
0%
100%
Audit report written
100%
100%
No secret printed anywhere
100%
100%
Correct item IDs referenced
100%
100%
Without context: $0.2075 · 48s · 12 turns · 14 in / 3,252 out tokens
With context: $0.3581 · 1m 15s · 22 turns · 59 in / 4,033 out tokens
5342bca
Table of Contents
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.