box — 9 skills

Pinned source listing — machine-checked

What declarations and files are present in this pinned source?

Pinned source declarations and file hashes were listed.

Review

Machine-checked · 2026-10-18

Run UTC: 2026-10-18T09:12:23Z
Reviewed: 2026-10-18
Published: 2026-10-18
Updated: 2026-10-18

Observations · Limitations · Evidence

What we ran

Git blob acquisition followed by static source inspection.

What we saw

Listed 9 skill declarations. Ran 47 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

Limits

Scope: acquisition and static inspection. Command results: commands.json.

developer-tools · skills · Upstream source · Upstream documentation

Pinned source inspection only; no runtime platform was exercised. UTC 2026-10-18T09:12:23Z, tree 423d03bac9ddf9350f4c8e6673c653dc884b54a0f71098f981cd8d8175b925ef.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record

name: box — 9 skills
slug: source-skills-86a4191a32117f954aab128d
type: skills
category: developer-tools
example: false
evidence state: pinned_source_listing
stamp: Pinned source listing — machine-checked
summary: Pinned source declarations and file hashes were listed.
outcome: Listed 9 skill declarations. Ran 47 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.
rule results: ["The retained source tree matches its acquisition manifest.","Declared skill names (listing.json): box; box-cli; box-integration-best-practices; box-legal-workflows; box-legal-workflows-contract; box-legal-workflows-intake; box-legal-workflows-ma; box-mcp; box-sdk-development"]
task: What declarations and files are present in this pinned source?
setup: Git blob acquisition followed by static source inspection.
limitations: Scope: acquisition and static inspection. Command results: commands.json.
source url: https://github.com/box/skills.git
documentation url: https://github.com/box/skills.git
commit: 84320fd8984b95cab430335cd341d8314c14bbcb
tree sha256: 423d03bac9ddf9350f4c8e6673c653dc884b54a0f71098f981cd8d8175b925ef
file sha256: {".claude-plugin/README.md":"fd8054621e607d7ef5686962dbe7793bfa01a8ce0e4f73e056020e7fdea116d4",".claude-plugin/marketplace.json":"048c034e2264644287e9116945b4bb0ea9175ee80e41abb106df60eba7bdbea0",".claude-plugin/plugin.json":"d5e00471cd7dff96e7e86befe2380b9b84af0fdec206c16cf75c77b40a081bae",".codex-plugin/README.md":"6f400e2e725617294690f794fee1a55a40372e6d688238550a3e869acfadad2d",".cursor-plugin/README.md":"68a8be989f8f32e53977ed68a208ca11767e69423ac8963e109469c35aa24f1c",".cursor-plugin/marketplace.json":"623edb6d83fe4324f258ff1c3aae3bfcb3b29533cd78d1600aad43cfe9a70f18",".cursor-plugin/plugin.json":"39c51109e56b11e2e376830442040da1ea7f1b41ee217b6eabb975f68d5500c1",".gitignore":"e08cf1b35085b8808bf01830ed44036a232b4fc9927a1b56e6f03062f6e55cff","CHANGELOG.md":"ca24bec30a8ce0508350e52c5d54307985267f2fa4496c7b858156dad4374202","LICENSE":"f124342183c7a19dd98784cb2929d8757b3dd41d64e41c67fdea4b29bc7caaf2","README.md":"f015950ae7f928440c7a5b803b00b7fff2d378ea7e3acf2296a6c466dfb31735","assets/logo.svg":"1dea00259e3edd6bce92015cfb9d62b6c785e771f51f843e1256b2e0caf9e1a7","mcp.json":"9c19f813e06759a5ace688f7a9123625c735db8424daaf924d95a438af8667f6","plugin.json":"19fc3462bf0e7052c7797b6fa2ea3e362f123ac4c7a0233c892e268fe1944da2","rules/box.mdc":"3c93cb3d95797793c9e716df30412ba61d7729ab51842f2718df1e8901b0915d","skills/box-cli/SKILL.md":"1e2a44d4578cf9fc85865a37626ff133901400c98c64f6ec15bcf75440873e84","skills/box-integration-best-practices/SKILL.md":"04bdf6d0971e0897440e9173d92f6b7bd9a9727f61adb5982f0bd7967d931551","skills/box-legal-workflows-contract/SKILL.md":"d7fc6b40d1bc4139bdb2821c54cf889c8ea5c7e0eb400939835140c21e4afa74","skills/box-legal-workflows-intake/SKILL.md":"de07d3c6a8253682f7c543609554ff2b751fe56a411ebe8649a337c24a32327e","skills/box-legal-workflows-ma/SKILL.md":"d8f0bd03e691ad7e038539690d7a89629fde12b8f0965ed3da0359b03d477adf","skills/box-legal-workflows/SKILL.md":"93e9327f95def879f493ecd62391c421f7c34d9208efc21021f101d34140b8a8","skills/box-mcp/SKILL.md":"2eff34615577a7c2aaae6c8a877e0db437cea04fb3e52e25a165a9729efbebf4","skills/box-sdk-development/SKILL.md":"2ccb85ddbc37c267be6dfdbceca7f27e0c97d4a6ac30b27c102bf49cc6b5c5f6","skills/box-sdk-development/references/bulk-operations.md":"52cce320d30b66542445fef16c9eb445521e115e88601e66a470248c0ec1c1e4","skills/box-sdk-development/references/file-transfer.md":"45da3cc8d606c1b4884b0756e5f3bbf5d36db7982c817a71e09b37fe4cd463a3","skills/box-sdk-development/references/python.md":"826ebdc242da8347818effc1fd424697e49ffbf6e169795317395c70487e3f2a","skills/box-sdk-development/references/typescript.md":"56d8ceb6b4a30d22213147b611d53f4f7b29eb7b5a0e8bd16d6cfc6989eec894","skills/box/SKILL.md":"81b5a3fc153c267b3a5317a077af59a889263a72d1354faf60a4551fa76e7fdb","skills/box/references/ai-and-retrieval.md":"cf73557d233f1a5b2922d33b368b06e0e6c399a4d5fa87c0c48fd1a8c8412187","skills/box/references/auth-and-setup.md":"f33331803e966393451a2b7c08903ead43392d56cabecb6102a2f5b9a969b03c","skills/box/references/box-cli.md":"8c359ebde38d034d9c085e862fd5ca0782bb843de458ce36a2a33a65669eba98","skills/box/references/bulk-operations.md":"f58484048d2e719d6b2e3bfb40581de5831696fcd86e2c932a294fd224a8c37b","skills/box/references/collaboration.md":"502339f996d3a9c857f3da75227b4704f15796905e6bc6175f458cde959dced0","skills/box/references/content-workflows.md":"a6ec74a8331d5e1d03de0702c6285653b27c2192cf5f1d0bbbd497150958571e","skills/box/references/guardrails.md":"ddf795dd40599b507cd47bab7284ccc25b8fd5aac5ca3a3f5db44e81aa67f95b","skills/box/references/mcp-doc-gen.md":"632d20caa8027dd7d51ced9e5a37b49ed96f472c1a7df1da62da1a6fa31bab48","skills/box/references/mcp-hubs.md":"90a0b3e385cd68aa583d893c64737ab52130a75272512f9676566e999f488b03","skills/box/references/mcp-search.md":"bfd836d1d842862c7118030f29af36a1dd12002cc81580265dd32736ba19e221","skills/box/references/rest-calls.md":"3724b44b2a4e63654ba8d439ade4c52ec7890fadf27bcefc3e3d15eef94b6359","skills/box/references/troubleshooting.md":"3ea0088af511b250a1fb036798726dfdf7443ce84bd567d5defd425d0159b319","skills/box/references/webhooks-and-events.md":"2ec7ec372e0b97efaa4d5e46bd2273b8c12571ece25368bf1215e30dbbae03d7","skills/box/references/workflows.md":"376811db79367972584104c71bb1d5bc4afade21e51fa254d46b5fdbf25f50fd"}
lockfiles: ["LOCK.json"]
utc date: 2026-10-18T09:12:23Z
source date: 2026-10-16
discovered date: 2026-10-16
retested date: 2026-10-18
reviewed date: 2026-10-18
published date: 2026-10-18
modified date: 2026-10-18
reviewer: Machine-checked
harness version: toolwitness harness at commit ce8871b5a9b1043f5ad9a568fb833cf91f333efa
claude code version: Not applicable: static source inspection (commands.json).
model id: Not applicable: static source inspection (commands.json).
scanner version: Not applicable: static source inspection.
rulepack version: Not applicable: static source inspection.
agents: []
commands: ["Ran 47 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."]
prompt list: ["Not applicable: static source inspection (commands.json)."]
history: ["2026-10-18T09:12:23Z: pinned source inspection"]
application: {"applicationCategory":"DeveloperApplication","name":"box — 9 skills","operatingSystem":"Not exercised","softwareVersion":"84320fd8984b95cab430335cd341d8314c14bbcb"}
review input: {"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json","listing.json","commands.json"],"text":"Pinned source declarations and file hashes were listed."},{"field":"outcome","id":"listed","sources":["LOCK.json","listing.json","commands.json"],"text":"Listed 9 skill declarations. Ran 47 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."},{"field":"rule_results.0","id":"tree","sources":["LOCK.json","listing.json","commands.json"],"text":"The retained source tree matches its acquisition manifest."},{"field":"rule_results.1","id":"declared","sources":["LOCK.json","listing.json","commands.json"],"text":"Declared skill names (listing.json): box; box-cli; box-integration-best-practices; box-legal-workflows; box-legal-workflows-contract; box-legal-workflows-intake; box-legal-workflows-ma; box-mcp; box-sdk-development"}],"evidence_sha256":{"LOCK.json":"70fd785f7f5fe201fe71901ba494df20a5baa5df70fa28012e6ef26b0186d6b0","commands.json":"2a6da867fa2820f1fb85e69e9809f6a2c6a68c8897cf2375604d1fa1998a2ec4","complete.json":"91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f","identity.json":"229cdda6b2239ec1820430f66937bccca87a074eebd933bd36aeefd1a47c7bfb","listing.json":"e1c203b25251bd2d9da99cb3bc8aec7f584817660ce08fef9a84760c2e2f2459","selection.json":"0ee6cf5e2f4ac80ffc4bfc9e72e290a9fb8ed9071f6f87aa9ccbfb1f0280b786"},"identity_artifact":"identity.json"}
review: {"codex":"9888922667bcf9c44d4f8cf3f03569f5ed6bb0c3ece5979ab731ed7801cf6143","date":"2026-10-18","gates":"593efde7149b5e3892b8dc5a71c840151c19381363a4823d0f65df40c92f9817","grok":"1764480736cc44c5b9705b5f4009c2c0b3db1d611dee481d7b407188927b715d","kind":"machine-checked","reviewed_sha256":"244702ca97a3196f01d06c7fbc8dffa8b6896d85ca635097658e356ee0d216c0","summary":"Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

Ran 47 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

sinkhole log

Download complete sinkhole log

Not applicable: static source inspection (commands.json).

canary log

Download complete canary log

Not applicable: static source inspection (commands.json).

scanner output

Download complete scanner output

Not applicable: static source inspection (commands.json).

normalized text

Download complete normalized text

{
  "listing": {
    "skills": [
      {
        "path": "skills/box/SKILL.md",
        "name": "box",
        "description": "Foundation skill for working with Box. Use this whenever the user mentions Box — authentication and MCP/CLI setup, choosing between MCP/CLI/REST, rate-limit and pacing guidance, troubleshooting Box errors (401/403/404/409/429), or working with Box MCP tools (files, search, collaboration, AI, hubs, doc gen). Route general Box requests to the right reference. For explicit CLI requests, use box-cli when installed.\n",
        "files": {
          "skills/box/SKILL.md": "81b5a3fc153c267b3a5317a077af59a889263a72d1354faf60a4551fa76e7fdb",
          "skills/box/references/ai-and-retrieval.md": "cf73557d233f1a5b2922d33b368b06e0e6c399a4d5fa87c0c48fd1a8c8412187",
          "skills/box/references/auth-and-setup.md": "f33331803e966393451a2b7c08903ead43392d56cabecb6102a2f5b9a969b03c",
          "skills/box/references/box-cli.md": "8c359ebde38d034d9c085e862fd5ca0782bb843de458ce36a2a33a65669eba98",
          "skills/box/references/bulk-operations.md": "f58484048d2e719d6b2e3bfb40581de5831696fcd86e2c932a294fd224a8c37b",
          "skills/box/references/collaboration.md": "502339f996d3a9c857f3da75227b4704f15796905e6bc6175f458cde959dced0",
          "skills/box/references/content-workflows.md": "a6ec74a8331d5e1d03de0702c6285653b27c2192cf5f1d0bbbd497150958571e",
          "skills/box/references/guardrails.md": "ddf795dd40599b507cd47bab7284ccc25b8fd5aac5ca3a3f5db44e81aa67f95b",
          "skills/box/references/mcp-doc-gen.md": "632d20caa8027dd7d51ced9e5a37b49ed96f472c1a7df1da62da1a6fa31bab48",
          "skills/box/references/mcp-hubs.md": "90a0b3e385cd68aa583d893c64737ab52130a75272512f9676566e999f488b03",
          "skills/box/references/mcp-search.md": "bfd836d1d842862c7118030f29af36a1dd12002cc81580265dd32736ba19e221",
          "skills/box/references/rest-calls.md": "3724b44b2a4e63654ba8d439ade4c52ec7890fadf27bcefc3e3d15eef94b6359",
          "skills/box/refe

Excerpt shown; complete evidence is in the download.

Download full record JSON

Disclaimer

This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated 2026-10-18