eobarretooo/1password
clawlite/skills/1password/SKILL.md
Retrieve secrets and vault items from 1Password using the op CLI with a service account token.
$ install --global
skillsauthnpx skillsauth add eobarretooo/clawlite 1passwordInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 27, 2026, 3:05 AM176.2s1 file scanned
SKILL.md
- name:
- 1password
- description:
- Retrieve secrets and vault items from 1Password using the op CLI with a service account token.
- always:
- false
- metadata:
- {"clawlite":{"emoji":"🔑","requires":{"bins":["op"]},"auth":{"requiredEnv":["OP_SERVICE_ACCOUNT_TOKEN"]}}}
1Password
Use this skill when the user needs to retrieve secrets or credentials from 1Password.
Auth
Set OP_SERVICE_ACCOUNT_TOKEN (create at https://developer.1password.com/docs/service-accounts/).
export OP_SERVICE_ACCOUNT_TOKEN="ops_..."
op whoami # verify auth
Read secrets
# Get a field from a vault item
op item get "AWS Production" --fields label=access_key_id
op item get "DB Password" --fields label=password --reveal
# Get as environment variable format
op item get "App Secrets" --format env
# Read a secret reference
op read "op://vault-name/item-name/field-name"
op read "op://Private/GitHub Token/credential"
List and search
op item list # list all items
op item list --vault "Private" # items in a vault
op item list --categories Login # filter by category
op item get "item name" --format json # full item as JSON
op vault list # list all vaults
Create/update items
op item create --category Login --title "New Item" \
--vault Private username=user password=secret
op item edit "Item Name" password=newvalue
Safety notes
- Never log or print secret values; pipe to env or use in-process only.
- Prefer
op readoverop item get --revealto minimize exposure. - Service account tokens grant broad vault access — scope minimally.
Related Skills
openclaw/taskflow
tools
VerifiedTrustedCommunity
Use when work should span one or more detached tasks but still behave like one job with a single owner context. TaskFlow is the durable flow substrate under authoring layers like Lobster, ACPX, plugins, or plain code. Keep conditional logic in the caller; use TaskFlow for flow identity, child-task linkage, waiting state, revision-checked mutations, and user-facing emergence.
357,764SKILL.mdUpdated Apr 10, 2026
openclaw/extensions/lobster
tools
VerifiedTrustedCommunity
# Lobster Lobster executes multi-step workflows with approval checkpoints. Use it when: - User wants a repeatable automation (triage, monitor, sync) - Actions need human approval before executing (send, post, delete) - Multiple tool calls should run as one deterministic operation ## When to use Lobster | User intent | Use Lobster? | | ------------------------------------------------------ | --------------------------
357,764SKILL.mdUpdated Apr 10, 2026
steipete/extensions/lobster
tools
VerifiedTrustedCommunity
# Lobster Lobster executes multi-step workflows with approval checkpoints. Use it when: - User wants a repeatable automation (triage, monitor, sync) - Actions need human approval before executing (send, post, delete) - Multiple tool calls should run as one deterministic operation ## When to use Lobster | User intent | Use Lobster? | | ------------------------------------------------------ | --------------------------
357,588SKILL.mdUpdated Apr 13, 2026
steipete/xurl
tools
VerifiedTrustedCommunity
A CLI tool for making authenticated requests to the X (Twitter) API. Use this skill when you need to post tweets, reply, quote, search, read posts, manage followers, send DMs, upload media, or interact with any X API v2 endpoint.
356,423SKILL.mdUpdated Apr 13, 2026