Agent skill · software engineering · mvanhorn
pp-1password
Printing Press CLI for 1Password. Agent-safe command layer over the official 1Password CLI and SDK service-account workflows.
Why this skill is useful
Adds executable commands for secure secret management workflows that aren't available in the standard 1Password CLI.
What it needs
Requires 1password-pp-cli installed locally. About 8k tokens when loaded. Last updated 2026-08-06. 1,890 stars on the source repository.
What this skill does
1Password — Printing Press CLI Prerequisites: Install the CLI This skill drives the 1password-pp-cli binary. You must verify the CLI is installed before invoking any command from this skill. If it is missing, install it first: 1. Install via the Printing Press installer. It defaults binaries to $HOME/.local/bin on macOS/Linux and %LOCALAPPDATA%\Programs\PrintingPress\bin on Windows: 2. Verify: 1password-pp-cli --version 3. Ensure the reported install directory is on $PATH for the agent/runtime that will invoke this skill. If the npx install fails (no Node, offline, etc.), fall back to a direct Go install (requires Go 1.26.6 or newer). This installs into $GOPATH/bin (default $HOME/go/bin), so add that directory to $PATH instead: If --version reports "command not found" after install, the runtime cannot see the binary directory on $PATH. Do not proceed with skill commands until verification succeeds. Use 1Password from agents without turning every task into a secret reveal. The CLI resolves fuzzy requests to exact op:// references, audits metadata, checks policy, and only calls op read, op inject, or op run after an explicit plan. When Not to Use This CLI Do not activate this CLI for requests that require creating, updating, deleting, publishing, commenting, upvoting, inviting, ordering, sending messages, booking, purchasing, or changing remote state. This printed CLI is intended for secret-reference planning, metadata audits, policy checks, and tightly gated local op read / op inject workflows. Unique Capabilities These capabilities aren't available in any other tool for this API. Secrets secrets resolve — Resolve fuzzy agent requests to exact op:// vault/item/field references without printing values. Prevents accidental broad reads and gives later commands an exact reference to use. secrets read — Read only an exact op:// reference, with policy checks and an explicit --reveal gate before values are printed. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills mvanhorn/1password