cargo-content Skill for Claude Code: Upload Files and Build Knowledge Libraries

Lets Claude upload files to a Cargo workspace, build knowledge libraries that agents search, and use files as storage with signed or public links.

Installs: 10.4K; on skills.sh
Stars: 21; on GitHub
Files: 5; besides SKILL.md
Updated: Oct 2026; last repo commit

Claude uses cargo-ai content commands to upload PDFs, CSVs and text so an agent can search them, build native or connector-backed libraries, and read, write and list files by path. It can also hand out a signed link or make a file public.

SKILL.md says upload indexes a file for search by sending it to OpenAI and mirrors it into the context repo, while put does neither. It needs the Cargo CLI and a Cargo sign-in. Wiring a file into an agent is cargo-ai.

Good for

Teams giving a Cargo agent their PDFs, docs or pricing sheets
Anyone storing reports or files in a workspace by path
GTM engineers syncing a help center into a library

Install cargo-content

Claude Code

Copy this prompt.

Install the cargo-content skill in Claude Code. Run this command:

/plugin marketplace add getcargohq/cargo-skills
/plugin install cargo@cargo-skills

Then check that it loaded and tell me how to use it.

2
Paste it into Claude Code. It shows the change and asks before running it.

Every Cargo skill drives the cargo-ai CLI, so install it and sign in first. A new account starts with 100 free credits and no card (README). Pick one channel, not two: the plugin and skills add both register the skills, so using both duplicates them. The whole bundle is the route the README documents; this skill's own files point to files in sibling skills such as ../cargo/references/prerequisites.md. The plugin needs Claude Code 2.1.154 or newer and adds hooks and two subagents; see the safety section.

From the project README. Source.

What's in the skill

When it loads

Manage the files a Cargo workspace holds — upload knowledge (PDF, CSV, text) and build native or connector-backed libraries agents retrieve from (RAG), and use files as plain storage: write and read by path, list a folder, hand out a signed or public link. Triggers: "upload this PDF", "add these docs as knowledge", "build a knowledge base", "sync our help center into Cargo", "what files are in the workspace", "index this folder", "attach our pricing sheet", "store this file", "save the report somewhere", "give me a link to the file", "make this file public". Skip when: wiring the file or library into an agent — use cargo-ai; uploading a CSV that drives a batch run — that is a workspace-management file upload.

Sections in SKILL.md

Bootstrap
Discover resources first
Files
Files as storage (paths and links)
Libraries
Critical rules
Attaching to an agent
Help

Key facts

Author: Cargo (frontmatter author: getcargo), in the vendor's own repo
License: MIT (LICENSE, README badge and plugin.json agree)
Version: 1.3.0
Installs on skills.sh: 10,390 (Nov 2, 2026)
GitHub stars: 21 (Nov 2, 2026)
Last commit: Oct 31, 2026
What installs: 6 files including SKILL.md: 4 reference and example files and skill-metadata.json
Needs: The cargo-ai CLI (npm) and a Cargo sign-in; a new account starts with 100 free credits
Cargo CLI license: UNLICENSED on npm; the skills bundle itself is MIT
Bundle size: README and plugin manifests say 19 skills, the skills.sh badge says 18, and the repo has 20 skill folders including a redirect stub
Works in: Claude Code, Codex, Cursor, Windsurf, GitHub Copilot, Hermes Agent and other skills.sh agents

What it includes

Uploads a file for agent search; indexes it and mirrors it into the context repo.
Runs code · file upload
Writes or reads a file by path; put does not index or mirror by default.
Runs code · file put / download
Lists files and folders or reads a file record.
Runs code · file list / ls / get
Renames a file or moves it to a folder.
Runs code · file update
Removes a file.
Delete · file remove / rm
Makes a signed link or sets a file public or private.
Runs code · file url / visibility
Builds native or connector-backed knowledge libraries.
Runs code · library create / update
Reads or removes libraries.
Delete · library list / get / remove

From the official docs

Permissions

Medium risk

It can send documents to an outside index and create links that anyone can open. Upload and share only what you intend to.

What it can do

Read your data
Create and change things
Delete things
Read-only mode

Watch out for

Uploads are indexed through OpenAI and mirrored to git
SKILL.md says upload sends files to the vector store (OpenAI) and mirrors them into the context repo. Use put with no index for files that should stay in Content only. github.com
Signed and public links need no sign-in
A signed URL works for anyone until it expires, and a public link stays until the file is made private or deleted. Share only on request, never for personal data. github.com
Claude runs the cargo-ai CLI as you
The skill drives the cargo-ai CLI. Sign-in is saved to ~/.config/cargo-ai/credentials.json, and the docs say to confirm the workspace with cargo-ai whoami before any write. github.com
The plugin route adds hooks that run shell commands
The plugin wires a PreToolUse hook on Bash that auto-approves safe cargo-ai calls, and a SessionStart hook that runs npm install -g @cargo-ai/cli at the pinned version. Login, token creation, report creation, project deploy and any remove or delete still prompt. github.com
The plugin sends a session summary to your Cargo workspace
The SessionEnd hook passes the last 60,000 bytes of the transcript to claude -p to write a title and summary, then stores them in your Cargo workspace session record. Use the skills CLI route if you do not want that. github.com
Path writes overwrite without asking
put replaces the newest file of that name in place, which changes what attached agents read. github.com
The plugin also adds two subagents
cargo-execution-planner and cargo-list-builder run on the haiku model with Read, Grep, Glob and Bash tools. The planner is described as read-only and the list builder as executing only pre-approved slices. github.com

Security advisories

No published security advisories as of Nov 2, 2026.

Technical details

Talks to	api.getcargo.io (Cargo API). registry.npmjs.org (CLI install). app.getcargo.io (token creation)
Sign-in and keys	Sign-in by emailed code, browser (OAuth) or an API token. Browser and email sign-in save a session to ~/.config/cargo-ai/credentials.json; API tokens are workspace-scoped and the README says to store them in a secrets manager.
Scopes	Uploads, overwrites, shares and removes workspace files Cargo workspace sign-in (saved in ~/.config/cargo-ai/credentials.json)

Questions

What does cargo-content do?

It manages files in a Cargo workspace. Claude uploads documents so an agent can search them, builds knowledge libraries, and uses the workspace as file storage with links you can share.

Where do my uploaded files go?

SKILL.md says upload indexes the file in a vector store that is sent to OpenAI, and by default mirrors it into your workspace context repo under .files/. put does neither by default.

Who can open a file link?

Anyone who has it. SKILL.md says a signed URL is unauthenticated until it expires (default 3600 seconds, max 10800), and a public file has a stable no-auth link until it is made private or deleted.

Can it overwrite a file?

Yes. SKILL.md says a path write overwrites the newest file of that name in the folder without asking, so every agent resource pointing at it serves the new bytes.

How do I give the file to an agent?

Files do nothing until attached to an agent's draft release and deployed. That wiring lives in cargo-ai.

How do I install it?

Use the install box above. Install the whole Cargo bundle, then the Cargo CLI and sign in. The README says to pick one channel, plugin or skills add, not both.

Is it official?

Yes. It sits in Cargo's own repo (getcargohq/cargo-skills), the LICENSE names Cargo as the copyright holder and the plugin manifest lists Cargo as the author.

Does it work in the Claude app, Codex or Cursor?

The README names Claude Code, Codex, Cursor, Windsurf, GitHub Copilot and Hermes Agent. For Claude Desktop it documents a Claude Cowork plugin route with network egress turned on. The skill drives a local CLI, so there is no plain Claude app skill upload here.

Is it safe to use?

It can send your documents to a third-party index and create links anyone can open. Upload indexes files through OpenAI and mirrors them into git, and signed or public links need no sign-in. Our advice: upload only files you are willing to share, and create links only when you mean to share.

Information

updated Nov 2, 2026

Repository: getcargohq/cargo-skills
Folder: cargo-content

getcargohq/cargo-skills skills.sh

Sources

Docs, issue trackers and discussions this page is built from.

Show all 7

cargo-skills README · github.com
cargo prerequisites.md · github.com
cargo-content SKILL.md · github.com
cargo-skills LICENSE · github.com
cargo-skills plugin.json · github.com
session-end.sh · github.com
session-start.sh · github.com