attack-path-analysis
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security…
Use Box's hosted MCP server to search, read, analyze, and manage Box content with Box AI and Hubs.
Claude Code
$ npx -y skills add CoWork-OS/CoWork-OS --skill box --agent claude-code
Codex
$ npx skills add CoWork-OS/CoWork-OS --skill box -a codex -y
Cursor
$ npx skills add CoWork-OS/CoWork-OS --skill box -a cursor -y
Gemini CLI
$ npx skills add CoWork-OS/CoWork-OS --skill box -a gemini-cli -y
GitHub Copilot
$ npx skills add CoWork-OS/CoWork-OS --skill box -a github-copilot -y
OpenCode
$ npx skills add CoWork-OS/CoWork-OS --skill box -a opencode -y
Windsurf
$ npx skills add CoWork-OS/CoWork-OS --skill box -a windsurf -y
name: box description: "Use Box's hosted MCP server to search, read, analyze, and manage Box content with Box AI and Hubs." version: "1.0.0" metadata: author: CoWork OS Contributors <info@coworkosapp.com>
Use the hosted Box MCP server for bounded Box content workflows, including search, retrieval, Box AI, Hubs, citations, collaboration, metadata, uploads, and document operations.
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security…
Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide Codex Security scan. Run repeated…
Use when Codex is already in the finding-discovery phase of a security scan or the user explicitly asks to discover candidate…
Use when the user explicitly asks to fix and verify a validated or plausible security finding. Do not use as the primary trigger…
Use when the user asks for a security review of a pull request, commit, branch diff, working-tree patch, or other Git-backed…
Use when the user asks for a repository-wide or scoped-path security scan.
Shape output for a reader with ADHD: lead with the next action, number multi-step work, restate state across turns, suppress…
Set up the owner profile so a personal agent knows who it works for (first-run setup, \"get to know me\"), or distill colleague,…