Op Secrets Updater

Overview

This skill enables agents to update existing secrets in 1Password using the op CLI. It supports comprehensive update operations including editing field values, adding and removing fields, renaming items, moving items between vaults, and managing tags.

The skill assumes the op CLI is installed and the user is already authenticated.

Table of Contents

• Overview
• Table of Contents
• Supported Operations
• Workflow
  • Phase 1: Context Assessment
  • Phase 2: Update Execution
• Reference Documentation

Supported Operations

Workflow

Phase 1: Context Assessment

Step 1: Understand the Request

Determine what the user wants to update:

1. Identify the target item:

   • Item name or ID
   • Vault location (if known or ambiguous)

2. Identify the update operation:

   • Edit field value(s)
   • Add new field(s)
   • Remove field(s)
   • Rename item
   • Move to different vault
   • Modify tags

3. Gather required information:

   • For field edits: field name(s) and new value(s)
   • For new fields: section name, field name, field type, value
   • For removal: field name to delete
   • For rename: new title
   • For move: destination vault
   • For tags: tag list to set

4. Clarify if needed:

   • If item name is ambiguous, ask for vault or use item ID
   • If field name is ambiguous, ask for section
   • For moves, confirm destination vault exists

Phase 2: Update Execution

Step 2: Execute Update Command

Based on the context assessment, execute the appropriate op command.

See op CLI Update Command Reference for complete command syntax.

Edit field value:

op item edit "<item-name>" <field>=<newvalue> --format json

Edit field in section:

op item edit "<item-name>" "Section.field"=<newvalue> --format json

Add custom field:

op item edit "<item-name>" "Section.newfield[type]"=<value> --format json

Remove custom field:

op item edit "<item-name>" "Section.field[delete]" --format json

Rename item:

op item edit "<item-name>" --title "<new-title>" --format json

Move to vault:

op item move "<item-name>" --destination-vault "<vault>"

Set tags:

op item edit "<item-name>" --tags "<tag1>,<tag2>" --format json

Generate new password:

op item edit "<item-name>" --generate-password --format json

Step 3: Confirm Update

1. Parse JSON response to extract updated item details
2. Verify update by checking the response shows expected changes
3. Present confirmation to user:
   • Item title and ID
   • Fields that were modified
   • New vault location (if moved)
   • Generated password (if applicable)

Note: When moving items, inform the user that the item receives a new ID.

Step 4: Handle Errors

Common errors and resolutions:

Reference Documentation

• op CLI Update Command Reference - Complete command syntax for all update operations