Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/aloth/powerskills/workiqnpx skills add aloth/PowerSkills --skill workiqgit clone --depth 1 https://github.com/aloth/PowerSkillsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00101 | $0.01800 |
| Opus 5 | $0.00051 | $0.00900 |
| Sonnet 5 | $0.00020 | $0.00360 |
| Haiku 4.5 | $0.00010 | $0.00180 |
Grade A, and why
powerskills-workiq scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 135 lines — stays where its author put it; the contents beside it link to each section on GitHub.
PowerSkills - Work IQ
Microsoft 365 automation through the official Work IQ CLI. Talks straight to Graph via silent SSO, so it reaches mail, calendar, Teams, SharePoint, OneDrive, and People without needing a running Outlook desktop client.
Why not just use outlook?
| Aspect | powerskills workiq |
powerskills outlook |
|---|---|---|
| Backend | Microsoft Graph via Work IQ CLI | Local Outlook COM |
| Reach | Mail + Calendar + Teams + SharePoint + OneDrive + People | Mail + Calendar only |
| Outlook client required | No | Yes (must be running) |
| Elevation | Works from admin or user shell | Non-admin only (COM integrity) |
| Tenant setup | Requires user consent (some tenants need admin consent) | None |
| Output shape | Structured Graph entities + deep-links | COM properties |
Use workiq for the strong, cloud-side path. Keep outlook for offline or COM-only situations.
Requirements
- Windows 10 or 11
- PowerShell 5.1 or later
- Node.js and npm (for
installaction) - Microsoft 365 work account signed in on the machine (Windows Account Manager / SSO)
- Work IQ CLI (
workiq) onPATH- theinstallaction handles this
Setup in one command
If Work IQ is not installed yet, this skill can bootstrap it:
.\powerskills.ps1 workiq install
.\powerskills.ps1 workiq accept-eula
.\powerskills.ps1 workiq check
install runs npm install -g @microsoft/workiq. accept-eula records EULA acceptance. check reports version, EULA state, and whether the CLI is reachable on PATH.
Actions
.\powerskills.ps1 workiq <action> [--params]
| Action | Params | Description |
|---|---|---|
check |
Report install state: installed, version, path, eula_accepted |
|
install |
[--scope user|machine] |
Install Work IQ globally via npm (user scope by default) |
accept-eula |
Accept Work IQ EULA (required once before any query) | |
version |
Show Work IQ CLI version | |
ask |
--question "text" [--agent name] [--timeout 120] |
Natural-language query against a Work IQ agent |
agents |
[--get-card name] |
List Work IQ agents, or return one agent card |
fetch |
--url <graph-path> |
Fetch a Work IQ entity by path (e.g. /me, /me/messages) |
search-paths |
--filter <regex> [--backend graph-v1|sharepoint-rest|dataverse] |
Discover Graph paths by regex (helps build fetch/call-function URLs) |
get-schema |
--path <api-path> [--method get|post|patch|delete] [--api-version v1.0|beta] |
Return the OpenAPI schema for a given path |
call-function |
--url <path-with-query> |
Call a read-only Graph function (e.g. /me/calendar/getSchedule?...). Include the query string in --url. |
do-action |
--url <path> [--body <json>] |
POST a Graph action (e.g. /me/sendMail) |
create |
--url <collection> --body <json> |
POST a new entity (e.g. /me/messages) |
update |
--url <entity> --body <json> |
PATCH an existing entity (e.g. /me/events/{id}) |
delete |
--url <entity> |
DELETE an entity |
debug |
--conversation <id> |
Create a Work IQ debug share link for a conversation |
raw |
--args "arg1 arg2 ..." |
Escape hatch: run any raw workiq sub-command |
help |
Show this file |
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 135 lines · 101 tokens per session scan A 2dcc184c8952
powerskills-workiq is a skill published in the GitHub repository aloth/PowerSkills (35 stars, last pushed 1mo ago), licensed MIT. It adds 101 tokens to every session and 1,800 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
browser-use
Direct browser control via CDP for web interaction: automation, scraping, testing, screenshots, and site/app work.
remote-browser
Controls an isolated Browser Use Cloud browser from a sandboxed machine with the current Browser Use CLI.
opencli-browser
Use when an agent needs to drive a real Chrome window via opencli — inspect a page, fill forms, click through logged-in flows, or extract data ad-hoc. Covers the selector-first target contract, compound form fields, stale-ref handling, network capture, and the agent-native envelopes the CLI returns. Not for writing…
opencli-adapter-author
Use when writing an OpenCLI adapter for a new site or adding a new command to an existing site. Guides end-to-end from first recon through field decoding, adapter coding, and verify. Replaces opencli-oneshot / opencli-explorer. For ad-hoc browser driving (no adapter), see opencli-browser instead; for a top-level…
cloud
Documentation reference for using Browser Use Cloud — the hosted API and SDK for browser automation. Use this skill whenever the user needs help with the Cloud REST API (v2, v3, or v4), browser-use-sdk (Python or TypeScript), X-Browser-Use-API-Key authentication, cloud sessions, browser profiles, profile sync, CDP…
open-source
Documentation reference for writing Python code using the browser-use open-source library. Use this skill whenever the user needs help with Agent, Browser, or Tools configuration, is writing code that imports from browseruse, asks about @sandbox deployment, supported LLM models, Actor API, custom tools, lifecycle…