📦

cargo-content

Name: cargo-content
Author: getcargohq

v1.0.1 Revisión del contenido r1 Seguro 📁 Acceso al sistema de archivos⚙️ Comandos externos🌐 Acceso a red

Manage Cargo Knowledge Files and Libraries

Scattered documents make workspace knowledge difficult to maintain. This skill guides Cargo CLI workflows to upload, organize, and manage knowledge files and connector-backed libraries.

Compatible con: Claude Codex Code(CC)

🥈 80 Plata

Maintain this Skill? Claim it 🥈 80 Plata

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "cargo-content" from https://skillstore.io/skills/getcargohq-cargo-content.md and its manifest at https://skillstore.io/api/skills/getcargohq-cargo-content/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/getcargohq-cargo-content.md Manifest firmado GET /api/skills/getcargohq-cargo-content/manifest Lockfile firmado GET /api/skills/getcargohq-cargo-content/lockfile

Pruébalo

Usando "cargo-content". List my Cargo knowledge files without changing anything.

Resultado esperado:

Illustrative result: knowledge-base.pdf is a PDF file with a size of 1 MB.
Its indexing indicator is enabled, and no folder is assigned.
No workspace content was changed.

Usando "cargo-content". Why does my agent not use the library I created?

Resultado esperado:

Creating a library does not automatically attach it to an agent.
Add the library to the agent draft release resources, then deploy the release using the related agent-management workflow.
Check file indexing indicators before expecting document retrieval.

Usando "cargo-content". Prepare a connector-backed Help Center library.

Resultado esperado:

The proposed library name is Help Center.
Provide the connector identifier, extractor slug, destination folder identifier, and extractor configuration.
Library creation will wait for those details and your confirmation.

Auditoría de seguridad

Seguro

v1 • 12/10/2026 Abrir el informe versionado

All 61 static findings are false positives involving Markdown formatting, documentation links, Cargo resource identifiers, or legitimate workspace checks. No evidence found of prompt injection, unauthorized data transfer, or malicious execution in the reviewed files. The documented workflows require authenticated Cargo access and can upload, modify, or remove workspace content.

Archivos escaneados

312

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Factores de riesgo

La auditoría estática y semántica completada más reciente no detectó hallazgos de seguridad confirmados. Esto no demuestra que el skill no tenga efectos secundarios.

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/getcargohq-cargo-content/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/getcargohq-cargo-content/security.svg)](https://skillstore.io/skills/getcargohq-cargo-content?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/getcargohq-cargo-content?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/getcargohq-cargo-content/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/getcargohq-cargo-content.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

getcargohq. (2026). cargo-content security audit report (audit version 1) [Author version 1.0.1]. Skillstore. https://skillstore.io/skills/getcargohq-cargo-content/audits/1

Cita BibTeX

@techreport{getcargohq-getcargohq-cargo-content-2026,
  author = {getcargohq},
  title = {cargo-content security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/getcargohq-cargo-content/audits/1},
  note = {Author version 1.0.1}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cargo-content security audit report (audit version 1)"
version: "1.0.1"
type: report
authors:
  - name: "getcargohq"
date-released: "2026-10-12"
url: "https://skillstore.io/skills/getcargohq-cargo-content/audits/1"
identifiers:
  - type: other
    value: "skillstore:getcargohq-cargo-content:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

100

Mantenibilidad

Contenido

Comunidad

100

Cumplimiento de la especificación

Lo que puedes crear

Maintain Product Knowledge

Upload approved product documents, rename outdated labels, and organize files for later attachment to a support agent.

Connect a Help Center

Create a knowledge library from an existing help-center connector and inspect the resulting library details.

Review Workspace Content

Inspect file sizes, content types, and indexing indicators before planning agent knowledge updates.

Prueba estos prompts

List Knowledge Files

Confirm the active Cargo workspace, then list knowledge files with names, sizes, content types, and indexing indicators. Make no changes.

Upload an Approved Document

Confirm my Cargo workspace, then upload ./product-docs.pdf as knowledge. Report the returned file identifier and explain whether agent attachment is still required.

Organize Existing Files

List Cargo files and folders, then propose moving selected research documents into the Research folder. Ask for confirmation before changing names or locations.

Prepare a Connector Library

Prepare a Cargo connector-backed library named Help Center. Request missing connector, extractor, folder, and configuration details; show the plan before creating anything.

Mejores prácticas

Confirm the active Cargo workspace and resource identifiers before uploading or modifying content.
Upload only documents approved for the workspace, and confirm removal or deployment actions before execution.
Inspect command responses and indexing indicators; use command help when connector configuration or response fields are unclear.

Evitar

Assuming an uploaded document is automatically available to every agent.
Using content uploads for batch-run input CSVs instead of the separate workspace-management upload surface.
Guessing connector, folder, or file identifiers instead of discovering the correct workspace resources.

Preguntas frecuentes

What does this skill manage?

It guides Cargo knowledge-file and library workflows, including uploads, inspection, organization, updates, and removal.

What setup is required?

Install the Cargo CLI, authenticate, and confirm the active workspace. The documented content commands require CLI version 1.0.19 or later.

Which file formats are documented?

The examples cover PDFs, CSVs, and plain text. Other common document formats are mentioned, but no complete format list is provided.

Does uploading a file make an agent use it?

No. Attach the file or library to the agent draft release resources and deploy that release through the related agent-management workflow.

How do native and connector libraries differ?

Native libraries hold workspace-managed uploaded files. Connector libraries sync external documents through an existing connector and an unstructured-data extractor.

Does the audit cover the Cargo service and installed CLI?

No. This audit reviews the supplied skill documents, not the installed npm package, Cargo service, connector permissions, or workspace data.