indigoai-us/hq-cowork-install
core/packages/hq-pack-cowork/skills/hq-cowork-install/SKILL.md
Install hq-pack-cowork for Claude Code / Cowork from an HQ install, build the Cowork upload artifact, and show the exact Cowork smoke-test steps. Use this to make installing the HQ Cowork plugin easy for an HQ user.
$ install --global
skillsauthnpx skillsauth add indigoai-us/hq-core hq-cowork-installInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 4, 2026, 3:14 AM179.8s1 file scanned
SKILL.md
- name:
- hq-cowork-install
- description:
- Install hq-pack-cowork for Claude Code / Cowork from an HQ install, build the Cowork upload artifact, and show the exact Cowork smoke-test steps. Use this to make installing the HQ Cowork plugin easy for an HQ user.
- allowed-tools:
- Bash
/hq-cowork-install — Install the Cowork plugin
This is the HQ-native setup helper for Cowork.
Run:
core/packages/hq-pack-cowork/scripts/install-cowork-plugin.sh --install
It checks host prerequisites, registers the local hq Claude marketplace,
installs/enables hq-cowork@hq, and builds:
~/Downloads/hq-pack-cowork.plugin
and prints the exact Cowork upload and smoke-test steps.
If the user only wants the upload artifact without touching Claude's plugin
registry, omit --install.
Optional output path:
core/packages/hq-pack-cowork/scripts/install-cowork-plugin.sh --install --out /tmp/hq-pack-cowork.plugin
After upload, Cowork should be able to use the same HQ behaviors as default HQ sessions through the plugin's host-side MCP transport.
Related Skills
indigoai-us/hq-cowork
tools
VerifiedTrustedCommunity
Discovery + dispatch entry point for native HQ inside Cowork (or any sandboxed Claude Code plugin host). Enumerates every HQ capability available through hq-pack-cowork's host-side MCP server (identity, sync, qmd/search, secrets, vault files, team & membership, packages & modules, meeting intelligence, feedback, schema-backed runs, guarded long-tail CLI) and routes to the right `mcp__hq__*` tool while preserving default HQ behavior through a different transport. Use when the agent needs HQ but `hq`/`qmd` aren't reachable from its bash sandbox and isn't sure which tool to call.
39SKILL.mdUpdated Jun 4, 2026
indigoai-us/hq-cowork-sync
tools
VerifiedTrustedCommunity
Run a full HQ sync (all cloud-backed companies, bidirectional) from a sandboxed Claude Code plugin host (Cowork) by calling the host-side `hq_sync` MCP tool. Same engine as AppBar HQ Sync and the `/hq-sync` skill, but routed through the hq-pack-cowork MCP server so it works even when the `hq` binary and `~/.hq` auth are not reachable from the agent's bash sandbox.
39SKILL.mdUpdated Jun 4, 2026
indigoai-us/hq-cowork-share
tools
VerifiedTrustedCommunity
Share an HQ vault path from a sandboxed Claude Code plugin host (Cowork) by calling the host-side `hq_share` MCP tool. Without `--with`, mints an encrypted single-use share-session URL (default 15-min expiry). With `--with`, grants direct ACL access to a person, group, or `@all`. Same capability as `/hq-share`, routed through hq-pack-cowork's MCP server so it works from a sandboxed agent.
39SKILL.mdUpdated Jun 4, 2026
indigoai-us/core/packages/hq-pack-cowork/skills/hq-cowork-secrets
tools
VerifiedTrustedCommunity
--- name: hq-cowork-secrets description: Use HQ secrets from a sandboxed Claude Code plugin host (Cowork). The host-side MCP server never returns a secret value itself: `mcp__hq__hq_secrets_exec` runs a command on the host with named secrets injected as env vars (only the command's output returns), and refuses to launch a shell or value-printing binary; `mcp__hq__hq_secrets_list` lists secret NAMES/metadata only. These tools run host commands with the user's privileges, so treat them as host-tru
39SKILL.mdUpdated Jun 4, 2026