cowork-to-code-bridge

cowork-to-code-bridge

Use this skill only when the user explicitly asks to operate on a machine they own or administer and the required work cannot be completed in the current sandbox. The bridge queues a named script through a shared local directory; it does not make a local task safe merely because it opens no inbound port.

[!WARNING]

The bridge daemon and its scripts run with the local account's permissions.

They can access local files, credentials, processes, and outbound network

connections available to that account. Treat every queued task as execution

on the user's real machine.

When to Use

Use this skill only when all of the following are true:

• the user explicitly requested work on their own machine;
• the bridge was already installed and independently verified by the owner;
• the exact local path, action, permission scope, and expected output are known;
• the action cannot be completed safely in the current sandbox;
• a fixed approved script can perform the task, or the user explicitly approves

the stronger run_claude.sh boundary described below.

Examples include an explicitly requested disk-health check, repository status, or a bounded edit in one named worktree. Do not activate this skill from a generic request to write code, reason about a problem, or edit files already available in the current environment.

Do Not Bootstrap from Mutab