{ "name": "box — 9 skills", "slug": "source-skills-86a4191a32117f954aab128d", "type": "skills", "category": "developer-tools", "example": false, "evidence_state": "pinned_source_listing", "stamp": "Pinned source listing — machine-checked", "summary": "Pinned source declarations and file hashes were listed.", "outcome": "Listed 9 skill declarations. Ran 47 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.", "rule_results": [ "The retained source tree matches its acquisition manifest.", "Declared skill names (listing.json): box; box-cli; box-integration-best-practices; box-legal-workflows; box-legal-workflows-contract; box-legal-workflows-intake; box-legal-workflows-ma; box-mcp; box-sdk-development" ], "task": "What declarations and files are present in this pinned source?", "setup": "Git blob acquisition followed by static source inspection.", "limitations": "Scope: acquisition and static inspection. Command results: commands.json.", "source_url": "https://github.com/box/skills.git", "documentation_url": "https://github.com/box/skills.git", "commit": "84320fd8984b95cab430335cd341d8314c14bbcb", "tree_sha256": "423d03bac9ddf9350f4c8e6673c653dc884b54a0f71098f981cd8d8175b925ef", "file_sha256": { ".claude-plugin/README.md": "fd8054621e607d7ef5686962dbe7793bfa01a8ce0e4f73e056020e7fdea116d4", ".claude-plugin/marketplace.json": "048c034e2264644287e9116945b4bb0ea9175ee80e41abb106df60eba7bdbea0", ".claude-plugin/plugin.json": "d5e00471cd7dff96e7e86befe2380b9b84af0fdec206c16cf75c77b40a081bae", ".codex-plugin/README.md": "6f400e2e725617294690f794fee1a55a40372e6d688238550a3e869acfadad2d", ".cursor-plugin/README.md": "68a8be989f8f32e53977ed68a208ca11767e69423ac8963e109469c35aa24f1c", ".cursor-plugin/marketplace.json": "623edb6d83fe4324f258ff1c3aae3bfcb3b29533cd78d1600aad43cfe9a70f18", ".cursor-plugin/plugin.json": "39c51109e56b11e2e376830442040da1ea7f1b41ee217b6eabb975f68d5500c1", ".gitignore": "e08cf1b35085b8808bf01830ed44036a232b4fc9927a1b56e6f03062f6e55cff", "CHANGELOG.md": "ca24bec30a8ce0508350e52c5d54307985267f2fa4496c7b858156dad4374202", "LICENSE": "f124342183c7a19dd98784cb2929d8757b3dd41d64e41c67fdea4b29bc7caaf2", "README.md": "f015950ae7f928440c7a5b803b00b7fff2d378ea7e3acf2296a6c466dfb31735", "assets/logo.svg": "1dea00259e3edd6bce92015cfb9d62b6c785e771f51f843e1256b2e0caf9e1a7", "mcp.json": "9c19f813e06759a5ace688f7a9123625c735db8424daaf924d95a438af8667f6", "plugin.json": "19fc3462bf0e7052c7797b6fa2ea3e362f123ac4c7a0233c892e268fe1944da2", "rules/box.mdc": "3c93cb3d95797793c9e716df30412ba61d7729ab51842f2718df1e8901b0915d", "skills/box/SKILL.md": "81b5a3fc153c267b3a5317a077af59a889263a72d1354faf60a4551fa76e7fdb", "skills/box/references/ai-and-retrieval.md": "cf73557d233f1a5b2922d33b368b06e0e6c399a4d5fa87c0c48fd1a8c8412187", "skills/box/references/auth-and-setup.md": "f33331803e966393451a2b7c08903ead43392d56cabecb6102a2f5b9a969b03c", "skills/box/references/box-cli.md": "8c359ebde38d034d9c085e862fd5ca0782bb843de458ce36a2a33a65669eba98", "skills/box/references/bulk-operations.md": "f58484048d2e719d6b2e3bfb40581de5831696fcd86e2c932a294fd224a8c37b", "skills/box/references/collaboration.md": "502339f996d3a9c857f3da75227b4704f15796905e6bc6175f458cde959dced0", "skills/box/references/content-workflows.md": "a6ec74a8331d5e1d03de0702c6285653b27c2192cf5f1d0bbbd497150958571e", "skills/box/references/guardrails.md": "ddf795dd40599b507cd47bab7284ccc25b8fd5aac5ca3a3f5db44e81aa67f95b", "skills/box/references/mcp-doc-gen.md": "632d20caa8027dd7d51ced9e5a37b49ed96f472c1a7df1da62da1a6fa31bab48", "skills/box/references/mcp-hubs.md": "90a0b3e385cd68aa583d893c64737ab52130a75272512f9676566e999f488b03", "skills/box/references/mcp-search.md": "bfd836d1d842862c7118030f29af36a1dd12002cc81580265dd32736ba19e221", "skills/box/references/rest-calls.md": "3724b44b2a4e63654ba8d439ade4c52ec7890fadf27bcefc3e3d15eef94b6359", "skills/box/references/troubleshooting.md": "3ea0088af511b250a1fb036798726dfdf7443ce84bd567d5defd425d0159b319", "skills/box/references/webhooks-and-events.md": "2ec7ec372e0b97efaa4d5e46bd2273b8c12571ece25368bf1215e30dbbae03d7", "skills/box/references/workflows.md": "376811db79367972584104c71bb1d5bc4afade21e51fa254d46b5fdbf25f50fd", "skills/box-cli/SKILL.md": "1e2a44d4578cf9fc85865a37626ff133901400c98c64f6ec15bcf75440873e84", "skills/box-integration-best-practices/SKILL.md": "04bdf6d0971e0897440e9173d92f6b7bd9a9727f61adb5982f0bd7967d931551", "skills/box-legal-workflows/SKILL.md": "93e9327f95def879f493ecd62391c421f7c34d9208efc21021f101d34140b8a8", "skills/box-legal-workflows-contract/SKILL.md": "d7fc6b40d1bc4139bdb2821c54cf889c8ea5c7e0eb400939835140c21e4afa74", "skills/box-legal-workflows-intake/SKILL.md": "de07d3c6a8253682f7c543609554ff2b751fe56a411ebe8649a337c24a32327e", "skills/box-legal-workflows-ma/SKILL.md": "d8f0bd03e691ad7e038539690d7a89629fde12b8f0965ed3da0359b03d477adf", "skills/box-mcp/SKILL.md": "2eff34615577a7c2aaae6c8a877e0db437cea04fb3e52e25a165a9729efbebf4", "skills/box-sdk-development/SKILL.md": "2ccb85ddbc37c267be6dfdbceca7f27e0c97d4a6ac30b27c102bf49cc6b5c5f6", "skills/box-sdk-development/references/bulk-operations.md": "52cce320d30b66542445fef16c9eb445521e115e88601e66a470248c0ec1c1e4", "skills/box-sdk-development/references/file-transfer.md": "45da3cc8d606c1b4884b0756e5f3bbf5d36db7982c817a71e09b37fe4cd463a3", "skills/box-sdk-development/references/python.md": "826ebdc242da8347818effc1fd424697e49ffbf6e169795317395c70487e3f2a", "skills/box-sdk-development/references/typescript.md": "56d8ceb6b4a30d22213147b611d53f4f7b29eb7b5a0e8bd16d6cfc6989eec894" }, "lockfiles": [ "LOCK.json" ], "utc_date": "2026-10-18T09:12:23Z", "source_date": "2026-10-16", "discovered_date": "2026-10-16", "retested_date": "2026-10-18", "reviewed_date": "2026-10-18", "published_date": "2026-10-18", "modified_date": "2026-10-18", "reviewer": "machine pipeline", "harness_version": "toolwitness harness at commit ce8871b5a9b1043f5ad9a568fb833cf91f333efa", "claude_code_version": "Not applicable: static source inspection (commands.json).", "model_id": "Not applicable: static source inspection (commands.json).", "scanner_version": "Not applicable: static source inspection.", "rulepack_version": "Not applicable: static source inspection.", "agents": [], "disclaimer": "This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.", "commands": [ "Ran 47 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection." ], "prompt_list": [ "Not applicable: static source inspection (commands.json)." ], "history": [ "2026-10-18T09:12:23Z: pinned source inspection" ], "application": { "name": "box — 9 skills", "softwareVersion": "84320fd8984b95cab430335cd341d8314c14bbcb", "applicationCategory": "DeveloperApplication", "operatingSystem": "Not exercised" }, "artifacts": { "transcript": "Ran 47 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.", "sinkhole_log": "Not applicable: static source inspection (commands.json).", "canary_log": "Not applicable: static source inspection (commands.json).", "scanner_output": "Not applicable: static source inspection (commands.json).", "normalized_text": "{\n \"listing\": {\n \"skills\": [\n {\n \"path\": \"skills/box/SKILL.md\",\n \"name\": \"box\",\n \"description\": \"Foundation skill for working with Box. Use this whenever the user mentions Box — authentication and MCP/CLI setup, choosing between MCP/CLI/REST, rate-limit and pacing guidance, troubleshooting Box errors (401/403/404/409/429), or working with Box MCP tools (files, search, collaboration, AI, hubs, doc gen). Route general Box requests to the right reference. For explicit CLI requests, use box-cli when installed.\\n\",\n \"files\": {\n \"skills/box/SKILL.md\": \"81b5a3fc153c267b3a5317a077af59a889263a72d1354faf60a4551fa76e7fdb\",\n \"skills/box/references/ai-and-retrieval.md\": \"cf73557d233f1a5b2922d33b368b06e0e6c399a4d5fa87c0c48fd1a8c8412187\",\n \"skills/box/references/auth-and-setup.md\": \"f33331803e966393451a2b7c08903ead43392d56cabecb6102a2f5b9a969b03c\",\n \"skills/box/references/box-cli.md\": \"8c359ebde38d034d9c085e862fd5ca0782bb843de458ce36a2a33a65669eba98\",\n \"skills/box/references/bulk-operations.md\": \"f58484048d2e719d6b2e3bfb40581de5831696fcd86e2c932a294fd224a8c37b\",\n \"skills/box/references/collaboration.md\": \"502339f996d3a9c857f3da75227b4704f15796905e6bc6175f458cde959dced0\",\n \"skills/box/references/content-workflows.md\": \"a6ec74a8331d5e1d03de0702c6285653b27c2192cf5f1d0bbbd497150958571e\",\n \"skills/box/references/guardrails.md\": \"ddf795dd40599b507cd47bab7284ccc25b8fd5aac5ca3a3f5db44e81aa67f95b\",\n \"skills/box/references/mcp-doc-gen.md\": \"632d20caa8027dd7d51ced9e5a37b49ed96f472c1a7df1da62da1a6fa31bab48\",\n \"skills/box/references/mcp-hubs.md\": \"90a0b3e385cd68aa583d893c64737ab52130a75272512f9676566e999f488b03\",\n \"skills/box/references/mcp-search.md\": \"bfd836d1d842862c7118030f29af36a1dd12002cc81580265dd32736ba19e221\",\n \"skills/box/references/rest-calls.md\": \"3724b44b2a4e63654ba8d439ade4c52ec7890fadf27bcefc3e3d15eef94b6359\",\n \"skills/box/references/troubleshooting.md\": \"3ea0088af511b250a1fb036798726dfdf7443ce84bd567d5defd425d0159b319\",\n \"skills/box/references/webhooks-and-events.md\": \"2ec7ec372e0b97efaa4d5e46bd2273b8c12571ece25368bf1215e30dbbae03d7\",\n \"skills/box/references/workflows.md\": \"376811db79367972584104c71bb1d5bc4afade21e51fa254d46b5fdbf25f50fd\"\n }\n },\n {\n \"path\": \"skills/box-cli/SKILL.md\",\n \"name\": \"box-cli\",\n \"description\": \"Use the official Box CLI for Box command-line operations, reproducible shell automation, CLI authentication or troubleshooting, and bulk Box work. Do not use for generic shell questions, Box strategy, or application code that should use a Box SDK.\",\n \"files\": {\n \"skills/box-cli/SKILL.md\": \"1e2a44d4578cf9fc85865a37626ff133901400c98c64f6ec15bcf75440873e84\"\n }\n },\n {\n \"path\": \"skills/box-integration-best-practices/SKILL.md\",\n \"name\": \"box-integration-best-practices\",\n \"description\": \"Build, debug, or review repeatable Box API integrations and agent workflows for efficient calls, bulk work, and 429 handling.\",\n \"files\": {\n \"skills/box-integration-best-practices/SKILL.md\": \"04bdf6d0971e0897440e9173d92f6b7bd9a9727f61adb5982f0bd7967d931551\"\n }\n },\n {\n \"path\": \"skills/box-legal-workflows/SKILL.md\",\n \"name\": \"box-legal-workflows\",\n \"description\": \"Shared building blocks for Box-based legal workflows — Box collaboration role definitions, Box AI usage boundaries (what AI must not decide), and reusable human-in-the-loop confirmation phrasings. Referenced by box-legal-workflows-ma, box-legal-workflows-intake, and box-legal-workflows-contract skills.\",\n \"files\": {\n \"skills/box-legal-workflows/SKILL.md\": \"93e9327f95def879f493ecd62391c421f7c34d9208efc21021f101d34140b8a8\"\n }\n },\n {\n \"path\": \"skills/box-legal-workflows-contract/SKILL.md\",\n \"name\": \"box-legal-workflows-contract\",\n \"description\": \"Automate contract review and monitoring with Box MCP — find new or expiring contracts, compare them against firm templates to flag material variances, write structured contract metadata back to Box for searchability, and produce variance reports with citations. Use this skill when the user mentions contract review or monitoring, NDA or MSA review, contract expiration or renewals, contract metadata, or variance analysis, even if they don't name a specific Box tool.\",\n \"files\": {\n \"skills/box-legal-workflows-contract/SKILL.md\": \"d7fc6b40d1bc4139bdb2821c54cf889c8ea5c7e0eb400939835140c21e4afa74\"\n }\n },\n {\n \"path\": \"skills/box-legal-workflows-intake/SKILL.md\",\n \"name\": \"box-legal-workflows-intake\",\n \"description\": \"Automate legal client intake and onboarding with Box MCP — review intake documents for completeness against firm requirements, summarize risk for attorney review, route incomplete or high-risk submissions to the right attorney, extract client and matter metadata to Box, and generate engagement letters from Box DocGen templates. Use this skill when the user mentions client intake, client onboarding, new client review, intake documents, or engagement letters.\",\n \"files\": {\n \"skills/box-legal-workflows-intake/SKILL.md\": \"de07d3c6a8253682f7c543609554ff2b751fe56a411ebe8649a337c24a32327e\"\n }\n },\n {\n \"path\": \"skills/box-legal-workflows-ma/SKILL.md\",\n \"name\": \"box-legal-workflows-ma\",\n \"description\": \"Build and manage M&A virtual data rooms with Box MCP — create secure due-diligence folder structures, scope role-based access for internal teams and external parties, validate permissions before sharing, and answer cross-document due-diligence questions with Box AI. Use this skill when the user mentions M&A, deal rooms, data rooms, VDRs, due diligence, or mergers and acquisitions.\",\n \"files\": {\n \"skills/box-legal-workflows-ma/SKILL.md\": \"d8f0bd03e691ad7e038539690d7a89629fde12b8f0965ed3da0359b03d477adf\"\n }\n },\n {\n \"path\": \"skills/box-mcp/SKILL.md\",\n \"name\": \"box-mcp\",\n \"description\": \"Connect clients to Box's hosted MCP server and operate Box through its tools. Use for Box MCP setup, authentication, missing tools, or Box tasks using an MCP connection.\",\n \"files\": {\n \"skills/box-mcp/SKILL.md\": \"2eff34615577a7c2aaae6c8a877e0db437cea04fb3e52e25a165a9729efbebf4\"\n }\n },\n {\n \"path\": \"skills/box-sdk-development/SKILL.md\",\n \"name\": \"box-sdk-development\",\n \"description\": \"Build or debug application code using an official Box SDK, especially Python or TypeScript/Node. Covers SDK call correctness, file transfer, bulk work, rate limits, and observability; not one-off CLI or MCP content operations.\",\n \"files\": {\n \"skills/box-sdk-development/SKILL.md\": \"2ccb85ddbc37c267be6dfdbceca7f27e0c97d4a6ac30b27c102bf49cc6b5c5f6\",\n \"skills/box-sdk-development/references/bulk-operations.md\": \"52cce320d30b66542445fef16c9eb445521e115e88601e66a470248c0ec1c1e4\",\n \"skills/box-sdk-development/references/file-transfer.md\": \"45da3cc8d606c1b4884b0756e5f3bbf5d36db7982c817a71e09b37fe4cd463a3\",\n \"skills/box-sdk-development/references/python.md\": \"826ebdc242da8347818effc1fd424697e49ffbf6e169795317395c70487e3f2a\",\n \"skills/box-sdk-development/references/typescript.md\": \"56d8ceb6b4a30d22213147b611d53f4f7b29eb7b5a0e8bd16d6cfc6989eec894\"\n }\n }\n ],\n \"hooks\": [],\n \"executions\": []\n }\n}" }, "review_input": { "identity_artifact": "identity.json", "evidence_sha256": { "LOCK.json": "70fd785f7f5fe201fe71901ba494df20a5baa5df70fa28012e6ef26b0186d6b0", "commands.json": "2a6da867fa2820f1fb85e69e9809f6a2c6a68c8897cf2375604d1fa1998a2ec4", "complete.json": "91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f", "identity.json": "229cdda6b2239ec1820430f66937bccca87a074eebd933bd36aeefd1a47c7bfb", "listing.json": "e1c203b25251bd2d9da99cb3bc8aec7f584817660ce08fef9a84760c2e2f2459", "selection.json": "0ee6cf5e2f4ac80ffc4bfc9e72e290a9fb8ed9071f6f87aa9ccbfb1f0280b786" }, "claims": [ { "id": "acquired", "field": "summary", "text": "Pinned source declarations and file hashes were listed.", "sources": [ "LOCK.json", "listing.json", "commands.json" ] }, { "id": "listed", "field": "outcome", "text": "Listed 9 skill declarations. Ran 47 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.", "sources": [ "LOCK.json", "listing.json", "commands.json" ] }, { "id": "tree", "field": "rule_results.0", "text": "The retained source tree matches its acquisition manifest.", "sources": [ "LOCK.json", "listing.json", "commands.json" ] }, { "id": "declared", "field": "rule_results.1", "text": "Declared skill names (listing.json): box; box-cli; box-integration-best-practices; box-legal-workflows; box-legal-workflows-contract; box-legal-workflows-intake; box-legal-workflows-ma; box-mcp; box-sdk-development", "sources": [ "LOCK.json", "listing.json", "commands.json" ] } ] }, "review": { "kind": "machine-checked", "date": "2026-10-18", "reviewed_sha256": "244702ca97a3196f01d06c7fbc8dffa8b6896d85ca635097658e356ee0d216c0", "gates": "593efde7149b5e3892b8dc5a71c840151c19381363a4823d0f65df40c92f9817", "codex": "9888922667bcf9c44d4f8cf3f03569f5ed6bb0c3ece5979ab731ed7801cf6143", "grok": "1764480736cc44c5b9705b5f4009c2c0b3db1d611dee481d7b407188927b715d", "summary": "Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation." } }