Retrieves credentials and generates passwords using op (1Password CLI) or bw (Bitwarden CLI). All passwords are copied to clipboard — never printed to the terminal.
CRITICAL RULE
NEVER display passwords, tokens, or secret values in plain text output. Always use clipboard copy commands. This applies to every secret retrieval, no exceptions.
CLI Tools
1Password (op)
# Copy a password to clipboard (PREFERRED — never print)
op item get "GitHub" --fields password | pbcopy
# Look up an item
op item get "GitHub"
# List all items
op item list
# Generate a password (copy to clipboard)
op generate-password --length 20 --symbols | pbcopy
# Get a specific field
op item get "AWS" --fields "Access Key ID"
Bitwarden (bw)
# Unlock vault first (session token required)
export BW_SESSION=$(bw unlock --raw)
# Copy password to clipboard (PREFERRED)
bw get password "GitHub" | pbcopy
# Look up an item
bw get item "GitHub"
# Generate a password (copy to clipboard)
bw generate --length 20 --special | pbcopy
Usage Guidelines
Always pipe passwords to pbcopy — confirm "Copied to clipboard" to the user instead of showing the value.
If the user asks to "show" or "display" a password, redirect: copy it to clipboard and inform them.
For lookups, show non-sensitive fields (username, URL, notes) but never the password itself.
If vault is locked, prompt the user to unlock it manually before proceeding.
Notes
op requires 1Password app installed and CLI signed in: op signin
bw requires Bitwarden CLI installed and vault unlocked each session
1---2name: c-secrets3description: What This Skill Does4---56## What This Skill Does78Retrieves credentials and generates passwords using `op` (1Password CLI) or `bw` (Bitwarden CLI). All passwords are copied to clipboard — never printed to the terminal.910## CRITICAL RULE1112**NEVER display passwords, tokens, or secret values in plain text output.** Always use clipboard copy commands. This applies to every secret retrieval, no exceptions.1314## CLI Tools1516### 1Password (`op`)1718```bash19# Copy a password to clipboard (PREFERRED — never print)20op item get "GitHub" --fields password | pbcopy2122# Look up an item23op item get "GitHub"2425# List all items26op item list2728# Generate a password (copy to clipboard)29op generate-password --length 20 --symbols | pbcopy3031# Get a specific field32op item get "AWS" --fields "Access Key ID"33```3435### Bitwarden (`bw`)3637```bash38# Unlock vault first (session token required)39export BW_SESSION=$(bw unlock --raw)4041# Copy password to clipboard (PREFERRED)42bw get password "GitHub" | pbcopy4344# Look up an item45bw get item "GitHub"4647# Generate a password (copy to clipboard)48bw generate --length 20 --special | pbcopy49```5051## Usage Guidelines52531. **Always pipe passwords to `pbcopy`** — confirm "Copied to clipboard" to the user instead of showing the value.542. If the user asks to "show" or "display" a password, redirect: copy it to clipboard and inform them.553. For lookups, show non-sensitive fields (username, URL, notes) but never the password itself.564. If vault is locked, prompt the user to unlock it manually before proceeding.5758## Notes5960- `op` requires 1Password app installed and CLI signed in: `op signin`61- `bw` requires Bitwarden CLI installed and vault unlocked each session
Run npx skillmds@latest add daxaur/c-secrets in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
What This Skill Does It is listed under Coding & Dev Tools on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
daxaur (@daxaur) published this skill. Their other Agent Skills are listed on their SkillMD profile.
daxaur