Menu
Document 1Password CLI patterns only — never read or store secrets in Otto config.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Image generation via Letta tool — artifacts saved locally; publish/external use is a red zone.
Charter — an operating contract system for autonomous agents. Use when the user invokes /charter or /goal, says they want to start/track/resume long-running work, gives vague intent to operationalize, or when you must own and update a durable charter contract with approval gates, ledger, and receipts. Object model Intent -> Charter -> State -> Receipt. The human owns charter legitimacy; you own operations.
Local Cognee graph recall — read-first sidecar; capture and delete require approval.
Browser-visible verification — route smoke, screenshots, console errors. Receipt required.
Discord outbound messaging — send/post is a one-way door.
GitHub PR and issue workflows via gh CLI — read-only by default; merge requires approval.
| name | 1password |
| description | Document 1Password CLI patterns only — never read or store secrets in Otto config. |
op read or secret materialization requires explicit approvalop locally1password.read: red1password.inject: redop read "op://vault/item/field" # user-approved only