op-secrets-updater

name	op-secrets-updater
description	Updates existing secrets in 1Password using the op CLI. Use when the user needs to modify passwords, edit field values, add or remove fields, rename items, move items between vaults, or manage tags on existing 1Password items. Supports all item types including Login, Password, API Credential, and Secure Note.

Overview

This skill enables agents to update existing secrets in 1Password using the op CLI. It supports comprehensive update operations including editing field values, adding and removing fields, renaming items, moving items between vaults, and managing tags.

The skill assumes the op CLI is installed and the user is already authenticated.

Table of Contents

• Overview
• Table of Contents
• Supported Operations
• Workflow
  • Phase 1: Context Assessment
  • Phase 2: Update Execution
• Reference Documentation

Supported Operations

Operation	Use Case
Edit Field	Update password, username, credential, or other field values
Add Field	Add new custom fields to an existing item
Remove Field	Delete custom fields from an item
Rename Item	Change an item's title
Move Item	Transfer an item to a different vault
Manage Tags	Add, replace, or remove tags

Workflow

Phase 1: Context Assessment

Step 1: Understand the Request

Determine what the user wants to update:

1. Identify the target item:

   • Item name or ID
   • Vault location (if known or ambiguous)

2. Identify the update operation:

   • Edit field value(s)
   • Add new field(s)
   • Remove field(s)
   • Rename item
   • Move to different vault
   • Modify tags

3. Gather required information:

   • For field edits: field name(s) and new value(s)
   • For new fields: section name, field name, field type, value
   • For removal: field name to delete
   • For rename: new title
   • For move: destination vault
   • For tags: tag list to set

4. Clarify if needed:

   • If item name is ambiguous, ask for vault or use item ID
   • If field name is ambiguous, ask for section
   • For moves, confirm destination vault exists

Phase 2: Update Execution

Step 2: Execute Update Command

Based on the context assessment, execute the appropriate op command.

See op CLI Update Command Reference for complete command syntax.

Edit field value:

op item edit "<item-name>" <field>=<newvalue> --format json

Edit field in section:

op item edit "<item-name>" "Section.field"=<newvalue> --format json

Add custom field:

op item edit "<item-name>" "Section.newfield[type]"=<value> --format json

Remove custom field:

op item edit "<item-name>" "Section.field[delete]" --format json

Rename item:

op item edit "<item-name>" --title "<new-title>" --format json

Move to vault:

op item move "<item-name>" --destination-vault "<vault>"

Set tags:

op item edit "<item-name>" --tags "<tag1>,<tag2>" --format json

Generate new password:

op item edit "<item-name>" --generate-password --format json

Step 3: Confirm Update

1. Parse JSON response to extract updated item details
2. Verify update by checking the response shows expected changes
3. Present confirmation to user:
   • Item title and ID
   • Fields that were modified
   • New vault location (if moved)
   • Generated password (if applicable)

Note: When moving items, inform the user that the item receives a new ID.

Step 4: Handle Errors

Common errors and resolutions:

Error	Resolution
item not found	Verify item name, try listing items in vault
vault not found	List available vaults with op vault list
more than one item matches	Use item ID instead of name, or specify vault with --vault
field not found	List item fields with op item get to verify field name
cannot delete built-in field	Use empty string to clear: field=""
permission denied	Verify vault access permissions

Reference Documentation

• op CLI Update Command Reference - Complete command syntax for all update operations