---

name: updating-op-secrets description: Updates existing secrets in 1Password using the op CLI. Use when the user needs to modify passwords, edit field values, add or remove fields, rename items, move items between vaults, or manage tags on existing 1Password items. Supports all item types including Login, Password, API Credential, and Secure Note.

Overview

This skill enables agents to update existing secrets in 1Password using the op CLI. It supports comprehensive update operations including editing field values, adding and removing fields, renaming items, moving items between vaults, and managing tags.

The skill assumes the op CLI is installed and the user is already authenticated.

Table of Contents

• Overview
• Table of Contents
• Supported Operations
• Workflow
  • Phase 1: Context Assessment
  • Phase 2: Update Execution
• Reference Documentation

Supported Operations

Workflow

Phase 1: Context Assessment

Step 1: Understand the Request

Determine what the user wants to update:

1. Identify the target item:

   • Item name or ID
   • Vault location (if known or ambiguous)

2. Identify the update operation:

   • Edit field value(s)
   • Add new field(s)
   • Remove field(s)
   • Rename item
   • Move to different vault
   • Modify tags

3. Gather required information:

   • For field edits: field name(s) and new value(s)
   • For new fields: section name, field name, field type, value
   • For removal: field name to delete
   • For rename: new title
   • For move: destination vault
   • For tags: tag list to set

4. Clarify if needed:

   • If item name is ambiguous, ask for vault or use item ID
   • If field name is ambiguous, ask for section
   • For moves, confirm destination vault exists

Phase 2: Update Execution

Step 2: Execute Update Command

Based on the context assessment, execute the appropriate op command.

See op CLI Update Command Reference for complete command syntax.

Edit field value:

Copyop item edit "<item-name>" <field>=<newvalue> --format json

Edit field in section:

Copyop item edit "<item-name>" "Section.field"=<newvalue> --format json

Add custom field:

Copyop item edit "<item-name>" "Section.newfield[type]"=<value> --format json

Remove custom field:

Copyop item edit "<item-name>" "Section.field[delete]" --format json

Rename item:

Copyop item edit "<item-name>" --title "<new-title>" --format json

Move to vault:

Copyop item move "<item-name>" --destination-vault "<vault>"

Set tags:

Copyop item edit "<item-name>" --tags "<tag1>,<tag2>" --format json

Generate new password:

Copyop item edit "<item-name>" --generate-password --format json

Step 3: Confirm Update

1. Parse JSON response to extract updated item details
2. Verify update by checking the response shows expected changes
3. Present confirmation to user:
   • Item title and ID
   • Fields that were modified
   • New vault location (if moved)
   • Generated password (if applicable)

Note: When moving items, inform the user that the item receives a new ID.

Step 4: Handle Errors

Common errors and resolutions:

Reference Documentation

• op CLI Update Command Reference - Complete command syntax for all update operations