360 Secure SkillHub
360 安全技能中心

Examine Sandbox

通过 aicoo 的 OS API 读取共享链接、访客与联系人状态,按财务、凭据、个人、法律等类别检索共享范围内的敏感内容,输出暴露范围与风险摘要,并在需要时缩小范围、降低笔记权限或撤销链接。

xisen-w
xisen-w
热度 36.33
最近更新 2026-07-16 22:09:39
分类:安全依赖:代码执行 / 第三方 API应用场景:报告撰写 / API 集成 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add examine-sandbox
Metadata
name
examine-sandbox
description
Use this skill when the user wants to check what data their shared agent can access, inspect what's being shared, review privacy, or see what guests will see. Triggers on: 'what can they see', 'check my link', 'audit my agent', 'review what I'm sharing', or 'what data is shared'.
metadata
{"author":"systemind","version":"2.0.0"}

Examine Sandbox

Inspect exactly what data and capabilities are included in shared links.

Prerequisites

  • PULSE_API_KEY must be set
  • Base URL: https://www.aicoo.io/api/v1

Core Workflow

Step 1: List network state

curl -s -H "Authorization: Bearer $PULSE_API_KEY" \
  "https://www.aicoo.io/api/v1/os/network" | jq .

Review:

  • shareLinks
  • visitors
  • contacts

Step 2: Check context size/scope

curl -s -H "Authorization: Bearer $PULSE_API_KEY" \
  "https://www.aicoo.io/api/v1/os/status" | jq .

Step 3: Search for sensitive content

# financial
curl -s -X POST "https://www.aicoo.io/api/v1/os/notes/search" \
  -H "Authorization: Bearer $PULSE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"revenue pricing confidential"}' | jq .

# credentials/personal info
curl -s -X POST "https://www.aicoo.io/api/v1/os/notes/search" \
  -H "Authorization: Bearer $PULSE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"password API key credentials"}' | jq .

Step 4: Report findings

Summarize:

  1. how many active links and their scopes
  2. notes/calendar permission levels
  3. visitor activity
  4. sensitive hits inside shared scope
  5. risk actions (downgrade/revoke)

Step 5: Restrict access if needed

# narrow scope
curl -s -X PATCH "https://www.aicoo.io/api/v1/os/share/{linkId}" \
  -H "Authorization: Bearer $PULSE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"scope":"folders","folderIds":[5,12]}' | jq .

# downgrade notes access
curl -s -X PATCH "https://www.aicoo.io/api/v1/os/share/{linkId}" \
  -H "Authorization: Bearer $PULSE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"notesAccess":"read"}' | jq .

# revoke
curl -s -X DELETE "https://www.aicoo.io/api/v1/os/share/{linkId}" \
  -H "Authorization: Bearer $PULSE_API_KEY" | jq .

Search Categories

Category Terms Risk
Financial revenue, burn rate, pricing, salary medium
Credentials password, token, key, secret critical
Personal phone, address, SSN, private high
Legal contract, NDA, agreement high