Manage Cargo Workspaces as TypeScript Projects
Manual workspace changes are difficult to review and reproduce across environments. This skill guides TypeScript resource definitions, deployment previews, and state management with Cargo.
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
Review the Skillstore skill "cargo-project" from https://skillstore.io/skills/getcargohq-cargo-project.md and its manifest at https://skillstore.io/api/skills/getcargohq-cargo-project/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智能体仍应展示其计划，并按安全策略请求必要确认。
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
正在使用“cargo-project”。 Add a HubSpot connector and contacts model, then show what would change.
预期结果:
正在使用“cargo-project”。 Help me manage an existing agent without creating another copy.
预期结果:
正在使用“cargo-project”。 Review my deployment approach for staging and production.
预期结果:
All 271 static alerts are false positives involving documentation formatting, fixed local imports, expected credential placeholders, and Cargo resource identifiers. One semantic risk remains: pull-request preview guidance treats imported TypeScript as safe without requiring isolation from credentials or privileged runners. No evidence found of prompt injection, credential exfiltration, or malicious payloads in the reviewed files.
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
https://skillstore.io/skills/getcargohq-cargo-project/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/getcargohq-cargo-project?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/getcargohq-cargo-project?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/getcargohq-cargo-project/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/getcargohq-cargo-project.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>getcargohq. (2026). cargo-project security audit report (audit version 1) [Author version 3.1.0]. Skillstore. https://skillstore.io/skills/getcargohq-cargo-project/audits/1@techreport{getcargohq-getcargohq-cargo-project-2026,
author = {getcargohq},
title = {cargo-project security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/getcargohq-cargo-project/audits/1},
note = {Author version 3.1.0}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cargo-project security audit report (audit version 1)"
version: "3.1.0"
type: report
authors:
- name: "getcargohq"
date-released: "2026-10-12"
url: "https://skillstore.io/skills/getcargohq-cargo-project/audits/1"
identifiers:
- type: other
value: "skillstore:getcargohq-cargo-project:audit:1"
description: "Skillstore immutable audit report identifier"
Declare CRM connectors, data models, and automation together so workspace changes can receive code review before deployment.
Configure protected-branch deployments with workspace-scoped tokens and separate state pointers for staging and production.
Bring live models and agents under project management without creating duplicate resources.
Help me scaffold a Cargo project in an empty directory. Confirm the workspace, explain dependencies, and stop after showing the deployment plan.
Add a HubSpot connector and contacts model to my Cargo project. Use secret() for credentials, wire dependencies by handle, and request approval before deployment.
Bring my existing Cargo agent under project management. Inspect its dependencies, bind its live UUID, and verify the plan avoids duplicate creation.
Design staging and production deployment jobs with separate states and scoped tokens. Isolate untrusted previews without secrets and require approval for pruning or paid schedules.
作者
getcargohq许可证
MIT
作者版本
v3.1.0
Skillstore 修订
r1
引用
dce5d81838e2be3f91f1efc08af35fe3256b6900
维护新鲜度
2026/10/13
使用量
0 次下载 · 0 次浏览
文件结构
Migrate cargo-cdk References to cargo-project
Existing cargo-cdk installations can retain an outdated skill name after a rename. This migration pointer identifies cargo-project as the replacement and documents the CLI naming change.
Manage Cargo Knowledge Files and Libraries
Scattered documents make workspace knowledge difficult to maintain. This skill guides Cargo CLI workflows to upload, organize, and manage knowledge files and connector-backed libraries.
Build and Configure AI Agents in Cargo
Configuring agents requires coordinating prompts, models, knowledge, tools, and releases. This skill guides Cargo configuration through documented CLI workflows and examples.
Connect Cargo MCP and Run Workspace Actions
Using Cargo through an AI client requires correct authentication, workspace selection, and action inputs. This skill guides hosted MCP connections, cost inspection, batch execution, and result reporting.
Manage Your Cargo GTM Knowledge Base
Scattered buyer knowledge makes positioning and sales guidance difficult to maintain. This skill organizes Cargo workspace documents and connects personas, plays, objections, and evidence.
自动化 DevOps 流水线和部署
由 alirezarezvani
DevOps 工作通常需要可重复的流水线、基础设施和部署模式。此技能提供用于 CI/CD、IaC、部署和运维审查的脚本及参考指南。
协调云端 DevOps 工作流
由 sickn33
云交付工作通常跨越多种工具和阶段。此技能将基础设施、CI/CD、Kubernetes、监控、安全、成本和恢复工作组织成清晰的提示。
构建更好的 Terraform 模块
由 sickn33
Terraform 项目常常会逐渐演变成不一致的模块、不清晰的测试和高风险的发布工作流。此技能为 Claude、Codex 和 Claude Code 提供实用的 Terraform 与 OpenTofu 模式，帮助实现更安全的基础设施交付。
提升 Playwright 测试覆盖率
由 C0ntr0lledCha0s
当配置、定位器和 fixtures 不一致时，Playwright 测试套件可能会变得不稳定。此技能提供可靠浏览器测试、调试和可复用页面对象的实用模式。
构建可靠的测试自动化
由 89jobrien
薄弱的测试会拖慢发布并掩盖回归问题。此技能可指导测试策略、TDD、自动化、覆盖率审查以及 Playwright Web 检查。
Audit NestJS Code with Evidence-Backed Findings
由 amirtaherkhani
NestJS repositories can hide boundary flaws and runtime risks that lint results alone cannot reveal. This skill combines local evidence collection and semantic review into one prioritized report.