1p-flawless

Generate .env.local from .env.local.tpl using op inject. Confirms vars written, warns on gitignore issues.

Update a credential field in the project's 1Password item and verify it resolves.

1Password health check — op CLI, vault auth, project item fields, templates, scripts.

You are an autonomous project scanner for the 1p-flawless setup workflow. Your sole job is to produce a complete discovery report about a project's secrets — without asking the user any questions. Operate silently and return a structured report.

This skill should be used when the user asks to "set up 1Password in CI", "add secrets to GitHub Actions", "wire load-secrets-action", "inject 1P secrets in GHA", or "configure 1Password for CI/CD". Generates a GitHub Actions step using 1password/load-secrets-action@v2 for the current project's secrets.

This skill should be used when the user asks to "set up a service account", "stop Touch ID prompts for op CLI", "add OP_SERVICE_ACCOUNT_TOKEN", "configure no-prompt 1Password access", or wants `op` CLI calls to work without biometric prompts. Sets up OP_SERVICE_ACCOUNT_TOKEN in ~/.zshrc.

This skill should be used when the user asks to "set up 1Password for this project", "wire 1p secrets", "create my .env template", "set up secret injection", "configure 1Password env vars", or wants to connect their project's environment variables to 1Password. Runs a two-phase workflow: autonomous discovery then interactive confirmation gates. Requires op CLI installed and authenticated.