Overview

This skill enables agents to create secrets in 1Password using the op CLI. It supports creating Login, Password, API Credential, and Secure Note items with template support and vault selection.

The skill assumes the op CLI is installed and the user is already authenticated.

Table of Contents

• Overview
• Table of Contents
• Supported Item Types
• Workflow
  • Phase 1: Context Assessment
  • Phase 2: Secret Creation
• Reference Documentation

Supported Item Types

| Type | Category | Use Case | |------|----------|----------| | Login | LOGIN | Website accounts, application logins | | Password | PASSWORD | Standalone passwords, WiFi, PINs | | API Credential | API_CREDENTIAL | API keys, access tokens, service credentials | | Secure Note | SECURE_NOTE | Text notes, recovery codes, configurations |

Workflow

Phase 1: Context Assessment

Step 1: Understand the Request

Determine what the user wants to create:

1. Identify the item type:

   • Login: Has username/password for a website or service
   • Password: Standalone password without login context
   • API Credential: API key, token, or service credential
   • Secure Note: Text information to store securely

2. Gather required information:

   • Title for the item (required)
   • Target vault (optional, uses default if not specified)
   • Field values based on item type

3. Check for special requirements:

   • Should password be auto-generated?
   • Are there tags to apply?
   • Any custom sections needed?

See Item Templates Reference for field requirements per type.

Phase 2: Secret Creation

Step 2: Gather Field Values

Based on the item type, collect the necessary field values:

Login:

• username: Account username or email
• password: Account password (or use --generate-password)
• url: Website URL (via --url flag)

Password:

• password: The password value (or use --generate-password)

API Credential:

• credential: The API key or secret
• username: Optional key identifier

Secure Note:

• notesPlain: The note content

Step 3: Execute Create Command

Build and execute the appropriate op item create command.

See op CLI Create Command Reference for complete syntax.

Basic pattern:

op item create --category <CATEGORY> \
  --title "<title>" \
  [--vault "<vault>"] \
  [field assignments...] \
  --format json

With generated password:

op item create --category Login \
  --title "<title>" \
  --generate-password=24 \
  username=<user> \
  --format json

Step 4: Confirm Creation

1. Parse JSON response to extract item details
2. Verify creation by checking for item ID in response
3. Present confirmation to user:
   • Item title and ID
   • Vault location
   • Generated password (if applicable)

Step 5: Handle Errors

Common errors and resolutions:

| Error | Resolution | |-------|------------| | vault not found | List vaults with op vault list, verify name | | already exists | Use different title or update existing item | | invalid category | Use valid category: Login, Password, "API Credential", "Secure Note" | | missing required field | Provide required fields for the category |

Reference Documentation

• op CLI Create Command Reference - Complete command syntax and options
• Item Templates Reference - Field structures for each item type