indigoai-us/hq-cowork
core/packages/hq-pack-cowork/skills/hq-cowork/SKILL.md
Discovery + dispatch entry point for native HQ inside Cowork (or any sandboxed Claude Code plugin host). Enumerates every HQ capability available through hq-pack-cowork's host-side MCP server (identity, sync, qmd/search, secrets, vault files, team & membership, packages & modules, meeting intelligence, feedback, schema-backed runs, guarded long-tail CLI) and routes to the right `mcp__hq__*` tool while preserving default HQ behavior through a different transport. Use when the agent needs HQ but `hq`/`qmd` aren't reachable from its bash sandbox and isn't sure which tool to call.
$ install --global
skillsauthnpx skillsauth add indigoai-us/hq-core hq-coworkInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 4, 2026, 3:15 AM176.2s1 file scanned
SKILL.md
- name:
- hq-cowork
- description:
- Discovery + dispatch entry point for native HQ inside Cowork (or any sandboxed Claude Code plugin host). Enumerates every HQ capability available through hq-pack-cowork's host-side MCP server (identity, sync, qmd/search, secrets, vault files, team & membership, packages & modules, meeting intelligence, feedback, schema-backed runs, guarded long-tail CLI) and routes to the right `mcp__hq__*` tool while preserving default HQ behavior through a different transport. Use when the agent needs HQ but `hq`/`qmd` aren't reachable from its bash sandbox and isn't sure which tool to call.
- allowed-tools:
- mcp__hq__hq_whoami, mcp__hq__hq_sync, mcp__hq__hq_team_sync, mcp__hq__hq_search, mcp__hq__hq_qmd, mcp__hq__hq_secrets_exec, mcp__hq__hq_secrets_list, mcp__hq__hq_share, mcp__hq__hq_files, mcp__hq__hq_members, mcp__hq__hq_groups, mcp__hq__hq_dm, mcp__hq__hq_packages, mcp__hq__hq_modules, mcp__hq__hq_meetings, mcp__hq__hq_sources, mcp__hq__hq_signals, mcp__hq__hq_feedback, mcp__hq__hq_run, mcp__hq__hq_cli
/hq-cowork — Native HQ from a sandboxed agent
Cowork's bash runs in an isolated Linux VM that cannot see ~/.hq (Cognito
auth) or reach the host's hq / qmd binaries. hq-pack-cowork ships a
host-side stdio MCP server that runs those binaries with full auth and
exposes them as mcp__hq__* tool calls. This skill is the map: it tells you
which tool covers which HQ capability and how to call it.
Args: $ARGUMENTS — optional. A capability keyword (e.g. sync,
secrets, meetings) jumps straight to that section's guidance. No arg =
print the full capability map below and ask what the user wants.
Capability map
| Need | Tool | Notes |
|---|---|---|
| Confirm identity / session | mcp__hq__hq_whoami | email + session expiry. First call to sanity-check wiring. |
| Bidirectional sync | mcp__hq__hq_sync | company to scope, personal: true for personal vault, else all. |
| Pull team content | mcp__hq__hq_team_sync | one-way down-sync; team to scope, dryRun to preview. |
| Search HQ content | mcp__hq__hq_search | qmd hybrid. See /hq-cowork-search. |
| qmd read/list/ask/index | mcp__hq__hq_qmd | Same qmd-first workflow as default HQ sessions: collections/status/list/get/multi_get/search/ask/update. |
| Run cmd with a secret | mcp__hq__hq_secrets_exec | values injected as env, NEVER returned. See /hq-cowork-secrets. |
| List secret names | mcp__hq__hq_secrets_list | names/metadata only — no values. |
| Share a vault path | mcp__hq__hq_share | mint URL or grant ACL. See /hq-cowork-share. |
| Read vault objects | mcp__hq__hq_files | browse / cat / acl / search / shared-with-me / get. See /hq-cowork-files. |
| Memberships | mcp__hq__hq_members | list / invite / revoke. |
| Permission groups | mcp__hq__hq_groups | list / members / create / delete / add / remove. |
| DM a teammate | mcp__hq__hq_dm | menubar notification. See /hq-cowork-dm. |
| HQ packages | mcp__hq__hq_packages | list / install / remove / update. |
| Knowledge modules | mcp__hq__hq_modules | list / add / sync / update. |
| Meetings | mcp__hq__hq_meetings | list / get / search / transcript / notes. See /hq-cowork-meetings. |
| Sources | mcp__hq__hq_sources | meeting/email/slack/linear/notion attached to an entity. |
| Signals | mcp__hq__hq_signals | action_item / commitment / decision / key_point / risk / summary. |
| File a bug / feature | mcp__hq__hq_feedback | action: bug\|feature, title, body. |
| Run with .env.schema secrets | mcp__hq__hq_run | validates cwd, injects env, returns child output only. |
| Long-tail HQ CLI | mcp__hq__hq_cli | guarded escape hatch for commands not yet wrapped. See /hq-cowork-cli. |
Security envelope (carries over from HQ core policies)
- Secret values never cross the MCP boundary.
hq_secrets_execinjects them into a child process env;hq_secrets_listshows names only. There is no value-revealing tool. Never try to echo a secret to capture its value. - Cross-company isolation. Always pass
companyexplicitly when crossing contexts. Never let the server fall back to another company's scope. If the scoped creds fail, stop and ask — don't retry against a different company. - Share-session URLs are single-use capabilities.
hq_sharereturns the minted URL once. Print it that turn, then redact ashttps://hq.{co}.com/share-session/<TOKEN_REDACTED>everywhere after. - Escape hatch stays guarded.
hq_cliblocks login/logout/onboard, secret-value output, rawhq secrets set|exec, andhq run(usehq_runinstead).
When to use this instead of the unprefixed skills
Use the hq-cowork-* family (and direct mcp__hq__* calls) only inside
Cowork or another sandboxed plugin host. On a normal host-side Claude Code
session prefer the unprefixed /hq-sync, /hq-share, /search,
/hq-secrets, /dm, etc. — fewer hops, same result.
What you do
- If
$ARGUMENTSnames a capability, skip to that tool and call it with the user's parameters. If ambiguous or empty, show the capability map and ask. - Prefer the dedicated
hq-cowork-*skill when one exists (search, share, secrets, files, dm, meetings) — it carries the per-capability nuance. - Always start a fresh wiring with
mcp__hq__hq_whoamiif a tool errors with an auth/ENOENT message — that confirms whether the host server is logged in and hashq/qmdon PATH.
Related Skills
indigoai-us/hq-cowork-sync
tools
VerifiedTrustedCommunity
Run a full HQ sync (all cloud-backed companies, bidirectional) from a sandboxed Claude Code plugin host (Cowork) by calling the host-side `hq_sync` MCP tool. Same engine as AppBar HQ Sync and the `/hq-sync` skill, but routed through the hq-pack-cowork MCP server so it works even when the `hq` binary and `~/.hq` auth are not reachable from the agent's bash sandbox.
39SKILL.mdUpdated Jun 4, 2026
indigoai-us/hq-cowork-share
tools
VerifiedTrustedCommunity
Share an HQ vault path from a sandboxed Claude Code plugin host (Cowork) by calling the host-side `hq_share` MCP tool. Without `--with`, mints an encrypted single-use share-session URL (default 15-min expiry). With `--with`, grants direct ACL access to a person, group, or `@all`. Same capability as `/hq-share`, routed through hq-pack-cowork's MCP server so it works from a sandboxed agent.
39SKILL.mdUpdated Jun 4, 2026
indigoai-us/core/packages/hq-pack-cowork/skills/hq-cowork-secrets
tools
VerifiedTrustedCommunity
--- name: hq-cowork-secrets description: Use HQ secrets from a sandboxed Claude Code plugin host (Cowork). The host-side MCP server never returns a secret value itself: `mcp__hq__hq_secrets_exec` runs a command on the host with named secrets injected as env vars (only the command's output returns), and refuses to launch a shell or value-printing binary; `mcp__hq__hq_secrets_list` lists secret NAMES/metadata only. These tools run host commands with the user's privileges, so treat them as host-tru
39SKILL.mdUpdated Jun 4, 2026
indigoai-us/core/packages/hq-pack-cowork/skills/hq-cowork-search
tools
VerifiedTrustedCommunity
--- name: hq-cowork-search description: Hybrid full-text + semantic search across HQ content (policies, skills, knowledge, workers, projects, per-company collections) from a sandboxed Claude Code plugin host (Cowork). Calls the host-side `hq_search` MCP tool, which wraps `qmd query` (hybrid: expansion + RRF + rerank — the recommended search mode). Use when the agent needs to find HQ content but `qmd` isn't reachable from its bash sandbox. allowed-tools: mcp__hq__hq_search --- # /hq-cowork-searc
39SKILL.mdUpdated Jun 4, 2026