Skill v1.0.1

currentAutomated scan95/100

aicoo-team/aicoo-skills/examine-sandbox

+3 new

──Details

PublishedAugust 9, 2026 at 08:16 PM

Content Hashsha256:ea3b362c842ad03d...

Git SHAd8d15dce1522

Bump Typepatch

Compare with v1.0.0

──Files

Files (1 file, 2.8 KB)

SKILL.md2.8 KBactive

SKILL.md · 97 lines · 2.8 KB

version: "1.0.1" name: examine-sandbox description: "Use this skill when the user wants to check what data their shared agent can access, inspect what's being shared, review privacy, or see what guests will see. Triggers on: 'what can they see', 'check my link', 'audit my agent', 'review what I'm sharing', or 'what data is shared'."

Examine Sandbox

Inspect exactly what data and capabilities are included in shared links.

Prerequisites

AICOO_API_KEY must be set
Base URL: https://www.aicoo.io/api/v1

Core Workflow

Step 1: List network state

bash

curl -s -H "Authorization: Bearer $AICOO_API_KEY" \
  "https://www.aicoo.io/api/v1/os/network" | jq .

Review:

shareLinks
visitors (signed-in visitors may include name, username, email, and user id)
contacts

Step 2: Check context size/scope

bash

curl -s -H "Authorization: Bearer $AICOO_API_KEY" \
  "https://www.aicoo.io/api/v1/os/status" | jq .

Step 3: Search for sensitive content

bash

# financial
curl -s -X POST "https://www.aicoo.io/api/v1/os/notes/search" \
  -H "Authorization: Bearer $AICOO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"revenue pricing confidential"}' | jq .
 
# credentials/personal info
curl -s -X POST "https://www.aicoo.io/api/v1/os/notes/search" \
  -H "Authorization: Bearer $AICOO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"password API key credentials"}' | jq .

Step 4: Report findings

Summarize:

how many active links and their scopes
notes/calendar permission levels
sign-in requirement and visitor activity
sensitive hits inside shared scope
risk actions (downgrade/revoke)

Step 5: Restrict access if needed

bash

# narrow scope
curl -s -X PATCH "https://www.aicoo.io/api/v1/os/share/{linkId}" \
  -H "Authorization: Bearer $AICOO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"scope":"folders","folderIds":[5,12]}' | jq .
 
# downgrade notes access
curl -s -X PATCH "https://www.aicoo.io/api/v1/os/share/{linkId}" \
  -H "Authorization: Bearer $AICOO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"notesAccess":"read"}' | jq .
 
# require sign-in
curl -s -X PATCH "https://www.aicoo.io/api/v1/os/share/{linkId}" \
  -H "Authorization: Bearer ${AICOO_API_KEY:-$PULSE_API_KEY}" \
  -H "Content-Type: application/json" \
  -d '{"requireSignIn":true}' | jq .
 
# revoke
curl -s -X DELETE "https://www.aicoo.io/api/v1/os/share/{linkId}" \
  -H "Authorization: Bearer $AICOO_API_KEY" | jq .

Search Categories

Category	Terms	Risk
Financial	revenue, burn rate, pricing, salary	medium
Credentials	password, token, key, secret	critical
Personal	phone, address, SSN, private	high
Legal	contract, NDA, agreement	high

← v1.0.0 All versions