| name | updating-op-secrets |
| description | Updates existing secrets in 1Password using the op CLI. Use when the user needs to modify passwords, edit field values, add or remove fields, rename items, move items between vaults, or manage tags on existing 1Password items. Supports all item types including Login, Password, API Credential, and Secure Note. |
Overview
This skill enables agents to update existing secrets in 1Password using the op CLI. It supports comprehensive update operations including editing field values, adding and removing fields, renaming items, moving items between vaults, and managing tags.
The skill assumes the op CLI is installed and the user is already authenticated.
Table of Contents
Supported Operations
| Operation | Use Case |
|---|---|
| Edit Field | Update password, username, credential, or other field values |
| Add Field | Add new custom fields to an existing item |
| Remove Field | Delete custom fields from an item |
| Rename Item | Change an item's title |
| Move Item | Transfer an item to a different vault |
| Manage Tags | Add, replace, or remove tags |
Workflow
Phase 1: Context Assessment
Step 1: Understand the Request
Determine what the user wants to update:
Identify the target item:
- Item name or ID
- Vault location (if known or ambiguous)
Identify the update operation:
- Edit field value(s)
- Add new field(s)
- Remove field(s)
- Rename item
- Move to different vault
- Modify tags
Gather required information:
- For field edits: field name(s) and new value(s)
- For new fields: section name, field name, field type, value
- For removal: field name to delete
- For rename: new title
- For move: destination vault
- For tags: tag list to set
Clarify if needed:
- If item name is ambiguous, ask for vault or use item ID
- If field name is ambiguous, ask for section
- For moves, confirm destination vault exists
Phase 2: Update Execution
Step 2: Execute Update Command
Based on the context assessment, execute the appropriate op command.
See op CLI Update Command Reference for complete command syntax.
Edit field value:
op item edit "<item-name>" <field>=<newvalue> --format json
Edit field in section:
op item edit "<item-name>" "Section.field"=<newvalue> --format json
Add custom field:
op item edit "<item-name>" "Section.newfield[type]"=<value> --format json
Remove custom field:
op item edit "<item-name>" "Section.field[delete]" --format json
Rename item:
op item edit "<item-name>" --title "<new-title>" --format json
Move to vault:
op item move "<item-name>" --destination-vault "<vault>"
Set tags:
op item edit "<item-name>" --tags "<tag1>,<tag2>" --format json
Generate new password:
op item edit "<item-name>" --generate-password --format json
Step 3: Confirm Update
- Parse JSON response to extract updated item details
- Verify update by checking the response shows expected changes
- Present confirmation to user:
- Item title and ID
- Fields that were modified
- New vault location (if moved)
- Generated password (if applicable)
Note: When moving items, inform the user that the item receives a new ID.
Step 4: Handle Errors
Common errors and resolutions:
| Error | Resolution |
|---|---|
item not found |
Verify item name, try listing items in vault |
vault not found |
List available vaults with op vault list |
more than one item matches |
Use item ID instead of name, or specify vault with --vault |
field not found |
List item fields with op item get to verify field name |
cannot delete built-in field |
Use empty string to clear: field="" |
permission denied |
Verify vault access permissions |
Reference Documentation
- op CLI Update Command Reference - Complete command syntax for all update operations