core/packages/hq-pack-cowork/skills/hq-cowork-search/SKILL.md
--- name: hq-cowork-search description: Hybrid full-text + semantic search across HQ content (policies, skills, knowledge, workers, projects, per-company collections) from a sandboxed Claude Code plugin host (Cowork). Calls the host-side `hq_search` MCP tool, which wraps `qmd query` (hybrid: expansion + RRF + rerank — the recommended search mode). Use when the agent needs to find HQ content but `qmd` isn't reachable from its bash sandbox. allowed-tools: mcp__hq__hq_search --- # /hq-cowork-searc
npx skillsauth add indigoai-us/hq-core core/packages/hq-pack-cowork/skills/hq-cowork-searchInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Searches indexed HQ content via the host-side qmd binary, surfaced as an
MCP tool so a sandboxed agent (Cowork) can use it even though qmd isn't
installed inside its Linux VM.
Args: $ARGUMENTS — query plus optional flags.
| Arg | Meaning |
|---|---|
| <query> (positional, required) | Natural-language search query. |
| -c <collection> / --collection <collection> | Scope to one collection (e.g. hq-infra, hq-knowledge, indigo). |
| -n <N> / --limit <N> | Number of results (default 10, max 50). |
| --format json\|md\|files | Output format. Omit for the default human snippet. |
Collections worth knowing about (varies per HQ install — run qmd ls on the
host to enumerate):
hq-infra — skills, policies, hookshq-knowledge — core/knowledge/public/hq-core/hq-workershq-projects{company-slug} — per-company knowledge, one collection per company/search/search
skill (and the qmd charter rule that says "qmd first") relies on the
qmd binary on PATH, which isn't true inside the sandbox.--format json and parse the response.On a host-side session, prefer the unprefixed /search or qmd query
directly — fewer hops, same results.
Extract <query> (required) and optional flags. Without a query, ask what
the user is looking for. If the query is vague ("find docs"), ask for a more
specific phrase — qmd hybrid is good but not magic.
{
"query": "<query>",
"collection": "<collection>", // omit to search all
"limit": <N>, // omit to use default 10
"format": "cli|json|md|files" // omit to use default cli
}
Call mcp__hq__hq_search.
For cli / md format, render the tool output as-is (already
human-readable). For json / files, summarize: top 5 paths + scores,
then offer to read the most relevant via the host MCP if the user wants
the body.
If no results, suggest broadening — drop the collection filter, try a
synonym, or fall back to qmd vsearch (pure semantic) via a follow-up
call with a different query phrasing.
The HQ charter mandates "qmd first" for HQ search — but only a host-side
session can actually shell out to the qmd binary. Inside Cowork's
sandbox, neither qmd nor the index DB it reads (~/.qmd/) is reachable.
The hq-pack-cowork MCP server runs qmd query (hybrid: expansion + RRF +
rerank) on the host and returns
the formatted result. This skill is the in-session adapter.
tools
Discovery + dispatch entry point for native HQ inside Cowork (or any sandboxed Claude Code plugin host). Enumerates every HQ capability available through hq-pack-cowork's host-side MCP server (identity, sync, qmd/search, secrets, vault files, team & membership, packages & modules, meeting intelligence, feedback, schema-backed runs, guarded long-tail CLI) and routes to the right `mcp__hq__*` tool while preserving default HQ behavior through a different transport. Use when the agent needs HQ but `hq`/`qmd` aren't reachable from its bash sandbox and isn't sure which tool to call.
tools
Run a full HQ sync (all cloud-backed companies, bidirectional) from a sandboxed Claude Code plugin host (Cowork) by calling the host-side `hq_sync` MCP tool. Same engine as AppBar HQ Sync and the `/hq-sync` skill, but routed through the hq-pack-cowork MCP server so it works even when the `hq` binary and `~/.hq` auth are not reachable from the agent's bash sandbox.
tools
Share an HQ vault path from a sandboxed Claude Code plugin host (Cowork) by calling the host-side `hq_share` MCP tool. Without `--with`, mints an encrypted single-use share-session URL (default 15-min expiry). With `--with`, grants direct ACL access to a person, group, or `@all`. Same capability as `/hq-share`, routed through hq-pack-cowork's MCP server so it works from a sandboxed agent.
tools
--- name: hq-cowork-secrets description: Use HQ secrets from a sandboxed Claude Code plugin host (Cowork). The host-side MCP server never returns a secret value itself: `mcp__hq__hq_secrets_exec` runs a command on the host with named secrets injected as env vars (only the command's output returns), and refuses to launch a shell or value-printing binary; `mcp__hq__hq_secrets_list` lists secret NAMES/metadata only. These tools run host commands with the user's privileges, so treat them as host-tru