📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills box-automation
📦
box-automation
Content revision r1 High Risk ⚙️ External commands🌐 Network access
Automate Box File Operations
Box work can require repeated search, folder lookup, sharing, and metadata steps. This skill gives Claude, Codex, and Claude Code practical workflows for authorized Box operations.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "box-automation" from https://skillstore.io/skills/sickn33-box-automation.md and its manifest at https://skillstore.io/api/skills/sickn33-box-automation/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "box-automation". Find the Client Reviews folder and summarize recent PDF files.
Expected outcome:
The response lists matching folders, confirms the chosen folder ID, and summarizes recent PDF names, owners, and update dates.
Using "box-automation". Review who can access the board deck file.
Expected outcome:
The response names each collaborator, current role, invite status, and any suggested access changes for approval.
Using "box-automation". Prepare to delete an outdated archive folder.
Expected outcome:
The response verifies the folder path, warns about permanent removal, and asks for confirmation before any destructive action.
Security Audit
High Riskv4 • 7/6/2026 Open versioned report
Most static findings are false positives from Markdown inline code around Box and Rube MCP tool names. One low-severity network finding is real because the setup uses an external MCP endpoint, and semantic review found high-impact Box download, sharing, and deletion capabilities.
1
Files scanned
234
Lines analyzed
1
Review items
0
False positives ignored
Confirmed security concerns (3)
High
Broad Box Data Export and Sharing Capability
The workflows cover Box search, downloads, zip creation, shared links, and collaboration updates. These intended operations can expose sensitive enterprise content without strict confirmation.
The cited workflows explicitly include download, zip, shared link, and collaboration management tools. The risk depends on authorization context, but the capability is clear.
High
Destructive Box File and Folder Operations
The skill includes folder deletion, permanent folder removal, and file deletion workflows. These actions can cause irreversible Box data loss if run on the wrong IDs.
The skill directly documents delete and permanent remove operations in workflow steps and the quick reference. The impact is high even though the behavior is intentional.
Medium
Third-Party MCP Trust Boundary
The skill tells users to add the external Rube MCP endpoint and complete Box OAuth through that connection. Users must trust the MCP provider with access to Box operations.
The setup instructions directly name the Rube MCP endpoint and Box OAuth flow. This is an explicit external trust boundary, not an inferred behavior.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Low
Hardcoded URL
**Get Rube MCP**: Add `https://rube.app/mcp` as an MCP server in your client configuration. No API k
This line instructs users to configure the external Rube MCP endpoint. That creates a real third-party network and OAuth trust boundary.
Risk Factors
⚙️ External commands (116)
SKILL.md:15 SKILL.md:16 SKILL.md:20 SKILL.md:23 SKILL.md:24 SKILL.md:35 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:39 SKILL.md:40 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:46 SKILL.md:47 SKILL.md:52 SKILL.md:53 SKILL.md:60 SKILL.md:61 SKILL.md:62 SKILL.md:63 SKILL.md:64 SKILL.md:65 SKILL.md:68 SKILL.md:69 SKILL.md:70 SKILL.md:71 SKILL.md:72 SKILL.md:73 SKILL.md:74 SKILL.md:75 SKILL.md:76 SKILL.md:80 SKILL.md:82 SKILL.md:83 SKILL.md:91 SKILL.md:92 SKILL.md:93 SKILL.md:94 SKILL.md:95 SKILL.md:96 SKILL.md:99 SKILL.md:100 SKILL.md:101 SKILL.md:102 SKILL.md:103 SKILL.md:104 SKILL.md:105 SKILL.md:108 SKILL.md:109 SKILL.md:110 SKILL.md:111 SKILL.md:112 SKILL.md:119 SKILL.md:120 SKILL.md:121 SKILL.md:122 SKILL.md:123 SKILL.md:124 SKILL.md:127 SKILL.md:128 SKILL.md:129 SKILL.md:130 SKILL.md:131 SKILL.md:132 SKILL.md:136 SKILL.md:138 SKILL.md:145 SKILL.md:146 SKILL.md:147 SKILL.md:150 SKILL.md:151 SKILL.md:152 SKILL.md:153 SKILL.md:159 SKILL.md:165 SKILL.md:166 SKILL.md:167 SKILL.md:168 SKILL.md:169 SKILL.md:173 SKILL.md:174 SKILL.md:179 SKILL.md:180 SKILL.md:181 SKILL.md:186 SKILL.md:187 SKILL.md:196 SKILL.md:197 SKILL.md:198 SKILL.md:199 SKILL.md:210 SKILL.md:211 SKILL.md:212 SKILL.md:213 SKILL.md:214 SKILL.md:215 SKILL.md:216 SKILL.md:217 SKILL.md:218 SKILL.md:219 SKILL.md:220 SKILL.md:221 SKILL.md:222 SKILL.md:223 SKILL.md:224 SKILL.md:225 SKILL.md:226 SKILL.md:227 SKILL.md:228 SKILL.md:229 SKILL.md:230 SKILL.md:231 SKILL.md:232 SKILL.md:233
🌐 Network access (4)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-box-automation/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-box-automation?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-box-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-box-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-box-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). box-automation security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-box-automation/audits/4BibTeX citation
@techreport{sickn33-sickn33-box-automation-2026,
author = {sickn33},
title = {box-automation security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/sickn33-box-automation/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "box-automation security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/sickn33-box-automation/audits/4"
identifiers:
- type: other
value: "skillstore:sickn33-box-automation:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
85
Content
69
Community
83
Spec Compliance
What You Can Build
Organize project files
Find project folders, list contents, upload new files, and create folders with consistent names.
Review access and sharing
Inspect file collaborations, identify external users, and prepare role changes for approval.
Search records by metadata
Use Box metadata templates and folder filters to locate documents for reporting or review.
Try These Prompts
Find a folder
Find the Box folder named Project Atlas and list its first 20 items.
Upload a file
Upload the local proposal PDF to the Box folder named Client Reviews. Confirm the target folder before uploading.
Search by metadata
Search Box for quarterly contracts updated this month, group results by folder, and identify files missing required metadata.
Audit collaborations
Audit Box collaborations for the Legal folder, flag external users, and prepare least-privilege role changes for approval.
Best Practices
- Search current Rube MCP schemas before running Box tools.
- Confirm file names, folder paths, IDs, and permissions before write actions.
- Use pagination for large folder listings, searches, and sign request lists.
Avoid
- Do not delete, share, or move Box content without explicit user confirmation.
- Do not assume IDs from partial search results when several items have similar names.
- Do not expose shared links or collaboration lists in untrusted conversations.
Frequently Asked Questions
Does this skill need a Box account?
Yes. It requires an authenticated Box connection through Rube MCP.
Can it upload and download files?
Yes. It documents upload and download workflows using Box file and folder IDs.
Can it manage shared access?
Yes. It can review collaborations and prepare role or sharing changes when permissions allow.
Does it support metadata search?
Yes. It includes Box metadata query guidance and parameter notes.
Can it permanently delete Box content?
Yes, if the connected account has permission. Users should require confirmation before destructive actions.
Why should tools be searched first?
Rube MCP tool schemas can change. Searching first helps use current parameter names and required fields.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
01171b582d636c013315c5e0d969c64f8d9cdff2
Maintenance freshness
7/18/2026
Usage
7 downloads · 120 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-architect
81Review Architecture Workflows and Project Paths
Architecture reviews need a consistent starting point and clear project boundaries. This skill provides workspace-scoped tool templates, command examples, and generic design references.
Coding & Development View
📦
senior-fullstack
81Review Fullstack Project Foundations
Fullstack project setup can require many tools and checks. This skill provides basic local wrappers, common commands, and general engineering guidance.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
lark-drive
78Manage Lark Drive Files and Permissions
by larksuite
Lark Drive work often requires many commands and careful token handling. This skill guides safe file, folder, comment, version, and permission workflows through lark-cli.
Office & Reports View
📦
gws-drive
73Manage Google Drive with GWS
by googleworkspace
Google Drive administration often requires many separate API operations. This skill guides Claude and Codex through supported gws commands for files, sharing, comments, revisions, and notifications.
Office & Reports View
📦
git-workflow
80Standardize Your Git Workflow
by Atman36
Inconsistent commits and branches make collaboration and releases harder to manage. This skill applies Conventional Commits, GitFlow, review practices, and pre-commit checks.
DevOps & Infrastructure View
📦
gws-drive-upload
80Upload Files to Google Drive
by googleworkspace
Manual Drive uploads interrupt automated workflows and require repeated metadata choices. This skill uploads local files with automatic MIME detection and optional destination settings.
Productivity View
📦
cloud-storage-web
80Manage CloudBase Web Storage
by tencentcloudbase
Browser storage workflows can fail when buckets, domains, or access rules are incomplete. This skill guides CloudBase Web SDK uploads, downloads, temporary URLs, and environment checks.
Coding & Development View
📦
brainstorming
79Plan Creative Work Before Building
by ZhanlinCui
Teams often start implementation before goals, constraints, and trade-offs are clear. This skill guides Claude, Codex, and Claude Code through structured brainstorming before design work begins.
Productivity View