CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

box-automation

Automate Box operations including file upload/download, content search, folder management, collaboration, metadata queries, and sign requests through Composio's Box toolkit.

Quality

73%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./plugins/AI-Agents-Safe-Coding-Skills-claude/skills/box-automation/SKILL.md

The canonical home for this skill is box-automation in administrakt0r/AI-Agents-Safe-Coding-Skills

SKILL.md
Quality
Evals
Security

Quality

Content

65%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-organized, information-dense MCP orchestration guide whose tool sequences, parameter details, and pitfalls are genuinely useful. Weaknesses are the absence of validation checkpoints around destructive operations, no example tool-call payloads, and a monolithic 227-line structure that inlines content better split into reference files.

Suggestions

Add explicit validation checkpoints to destructive workflows, e.g., "Before BOX_DELETE_FOLDER, list folder contents and confirm with the user that the correct folder_id is targeted" and "Verify trash status after deletion".

Split the Quick Reference table and per-tool parameter details into a references/ file (e.g., references/tool-params.md), keeping SKILL.md as an overview with clearly signaled one-level-deep links.

Include one complete example tool-call payload (e.g., a BOX_UPLOAD_FILE call showing the full FileUploadable object) so the guidance is copy-paste ready.

Remove the filler "When to Use" section and consolidate duplicated ID-resolution/pagination guidance into the Common Patterns section.

DimensionReasoningScore

Conciseness

The body is dense, tool-specific reference material (tool slugs, parameters, error codes) that Claude cannot know beforehand, so nearly every token earns its place. Minor duplication (ID-from-URL guidance appears in both workflow 1 pitfalls and Common Patterns; pagination rules repeated) and the vacuous closing line "This skill is applicable to execute the workflow or actions described in the overview" keep it below anchor 5.

4 / 5

Actionability

Guidance is mostly executable: exact tool names with [Prerequisite]/[Required]/[Optional] roles, concrete parameter names and values ("0" for root, double-underscore nested names, uppercase-only Boolean operators), and pitfalls citing specific errors (HTTP 400 `metadata_after_file_contents`). It falls short of anchor 5 because no complete example tool-call payload is shown — e.g., the `FileUploadable` object with `s3key`, `mimetype`, `name` is described but never demonstrated.

4 / 5

Workflow Clarity

Sequences are well-structured and the Setup section includes verification ("Confirm connection status shows ACTIVE"), but the destructive workflows (BOX_DELETE_FOLDER, BOX_PERMANENTLY_REMOVE_FOLDER) lack validation checkpoints such as verifying contents or confirming the correct folder ID before deletion. The judging guideline caps destructive/batch workflows without validation at 3, which takes precedence over the otherwise strong sequencing.

3 / 5

Progressive Disclosure

Section headers and the quick-reference table give the document reasonable structure, but at 227 lines the per-tool parameter details and 23-row reference table are all inlined in SKILL.md with no reference files at all — the pattern anchor 3 describes (content that could be in a separate file is inline). The 50-line simple-skill exception does not apply, and it lacks the split-and-signaled structure of anchor 4 or 5.

3 / 5

Total

14

/

20

Passed

Description

71%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, specific description that names the domain and six concrete capabilities without fluff. Its main weakness is the complete absence of a 'when to use' trigger clause, which caps completeness and limits natural trigger-term coverage.

Suggestions

Append an explicit trigger clause, e.g., "Use when the user mentions Box, uploading/downloading Box files, sharing Box documents, or Box Sign requests."

Add natural user phrasings as trigger synonyms ("Box file sharing", "Box Sign", "share a Box folder") so the skill fires on how users actually ask.

Keep the existing third-person action list unchanged — it is the strongest part of the description.

DimensionReasoningScore

Specificity

The description lists six concrete actions ("file upload/download, content search, folder management, collaboration, metadata queries, and sign requests") that comprehensively cover the Box automation domain. It clearly matches the anchor for multiple specific concrete actions with comprehensive coverage, not the anchor-4 case with minor gaps.

5 / 5

Completeness

The "what" is clearly and concretely answered, but there is no "Use when..." clause or equivalent trigger guidance — the when is entirely missing rather than merely weak. Per the judging guideline, a missing 'Use when' clause caps completeness at 3.

3 / 5

Trigger Term Quality

Natural terms users would say are present ("Box", "file upload/download", "content search", "sign requests"), giving good keyword coverage. A few natural variations are missing (e.g., "share Box files", "Box Sign" phrasing), which keeps it below the comprehensive synonym-level anchor 5 but above anchor 3's missing common variations.

4 / 5

Distinctiveness Conflict Risk

"Box" and "Composio's Box toolkit" establish a clear product niche with minimal conflict risk. However, the generic action phrases ("file upload/download", "folder management") create minor overlap risk with closely related cloud-storage skills, matching anchor 4 rather than the fully distinct anchor 5.

4 / 5

Total

16

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

plugins/AI-Agents-Safe-Coding-Skills-claude/skills/box-automation/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.