Agent skill

Sandbox File Discovery And Validation

by HKUDS in HKUDS/OpenSpace

Use shell tools safely in sandboxed environments by discovering files from real workspace roots instead of assumed user folders, then explicitly verifying output artifacts after generation.

MITAuto-check passedDocuments & Office

Install Sandbox File Discovery And Validation

skills CLI
$ npx skills add HKUDS/OpenSpace --skill sandbox-file-discovery-and-validation -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install HKUDS/OpenSpace sandbox-file-discovery-and-validation --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/HKUDS/OpenSpace.git skills-src && mkdir -p .claude/skills && cp -r skills-src/benchmarks/gdpval/skills/sandbox-file-discovery-and-validation .claude/skills/sandbox-file-discovery-and-validation && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
sandbox-file-discovery-and-validation
GitHub stars
7.8k
Token cost
~1.7k tokens
SKILL.md length
882 words
Files
2
Skills in repo
199
Repo updated
First seen
Licence
MIT

At a glance

Use shell tools safely in sandboxed environments by discovering files from real workspace roots instead of assumed user folders, then explicitly verifying output artifacts after generation.

  • Documents & Office work in your project
  • SKILL.md covers Core principles, When to use this, Recommended workflow and 2) Avoid assumed folders, plus 11 more sections
  • Calls python

What it does

Sandbox File Discovery And Validation is an agent skill from HKUDS/OpenSpace. Use shell tools safely in sandboxed environments by discovering files from real workspace roots instead of assumed user folders, then explicitly verifying output artifacts after generation.

Its SKILL.md is about 1.7k tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file.

It sits in Documents & Office. It works with Microsoft Excel. The repository describes itself as: "OpenSpace: The Skill Management Layer for AI Agents" -- https://open-space.cloud/. The licence is MIT.

When your agent uses it

  • Documents & Office work in your project

Example prompts

  • “/sandbox-file-discovery-and-validation”

Requirements

  • Python 3

What it can do on your machine

Read from SKILL.md and the folder at commit 3827781. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • python

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Sandbox File Discovery And Validation loads about 1.7k tokens when it runs. Until then it costs about 57 tokens; SKILL.md has 882 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~57
When it runs · the whole SKILL.md, loaded when a task matches
~1.7k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from HKUDS/OpenSpace at commit 3827781, republished under its MIT licence (© HKUDS). 882 words, ~1,698 tokens.

Download SKILL.mdSave it as .claude/skills/sandbox-file-discovery-and-validation/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.
name
sandbox-file-discovery-and-validation
description
Use shell tools safely in sandboxed environments by discovering files from real workspace roots instead of assumed user folders, then explicitly verifying output artifacts after generation.

Sandbox File Discovery and Validation

Use this skill when working in constrained or sandboxed shell environments where common folders like ~/Desktop, ~/Documents, or ~/Downloads may not exist, may be inaccessible, or may not be where task files are stored.

The goal is to:

  1. discover files from actual accessible roots,
  2. avoid brittle path assumptions,
  3. generate outputs in known locations, and
  4. explicitly validate that outputs were created and match expectations.

Core principles

  • Do not assume GUI-era user folders exist.
  • Start from the current working directory and other confirmed workspace roots.
  • Use recursive search from known roots, not from / unless necessary.
  • Prefer deterministic output paths you control.
  • After creating an artifact, verify it exists, is readable, and matches the requested form.

When to use this

Use this pattern when:

  • you need to locate input files in an unfamiliar sandbox,
  • the environment may be ephemeral or nonstandard,
  • you are producing files for the user,
  • success depends on the actual contents or structure of the output.
1) Establish your real working roots

Begin by identifying where you are and what directories are actually available.

Example: pwd ls -la find . -maxdepth 2 -type d | sort

If needed, inspect nearby likely roots: ls -la /tmp ls -la /workspace 2>/dev/null || true ls -la /workspaces 2>/dev/null || true ls -la /mnt/data 2>/dev/null || true

Treat only confirmed, readable directories as search roots.

2) Avoid assumed folders

Do not begin with paths like:

  • ~/Desktop
  • ~/Documents
  • ~/Downloads

unless you have already confirmed they exist and are relevant.

Bad: find ~/Desktop -name "*.xlsx"

Better: find . -type f -name "*.xlsx" or, if a root is confirmed: find /workspace -type f -name "*.xlsx" 2>/dev/null

3) Search from known roots with bounded, focused queries

Prefer targeted searches over broad filesystem scans.

Useful patterns: find . -type f | sort find . -type f -iname "*report*" find . -type f \( -iname "*.csv" -o -iname "*.xlsx" -o -iname "*.json" \)

If multiple roots are known: find . /workspace /mnt/data -type f 2>/dev/null | sort

Guidelines:

  • suppress permission noise with 2>/dev/null when appropriate,
  • filter by extension or name fragment,
  • sort output for stable inspection,
  • keep searches bounded to known roots.

4) Choose a deterministic output location

When generating a file, write it somewhere explicit and easy to re-check.

Good patterns:

  • current directory,
  • a task-specific subdirectory like ./output,
  • a confirmed writable workspace directory.

Example: mkdir -p output python make_result.py --out output/final.xlsx

Avoid writing to guessed locations that may not exist.

5) Immediately validate the output artifact

Never assume generation succeeded just because a command exited successfully.

At minimum, confirm:

  • the file exists,
  • the path is the one you intended,
  • the file is non-empty when applicable,
  • the format or structure matches the task.

Basic checks: ls -l output/final.xlsx test -f output/final.xlsx && echo "exists" test -s output/final.xlsx && echo "non-empty" file output/final.xlsx

For text-like outputs: head -n 20 output/result.csv wc -l output/result.csv

For structured outputs, inspect with the relevant tool:

  • CSV: preview headers and row counts
  • JSON: parse and inspect keys
  • ZIP-like formats such as .xlsx: verify internal structure or open with a library
  • generated code/config: run syntax or schema checks if available
Show full SKILL.md (374 more words)Show less

6) Validate against task requirements, not just file existence

A file existing is necessary but not sufficient.

Check the artifact against the requested deliverable:

  • expected filename or location,
  • expected sheet names, tabs, columns, or keys,
  • expected formulas, calculations, or derived values,
  • expected number of records,
  • expected transformations or formatting.

Examples:

  • If a workbook was requested, verify the workbook contains the required sheets.
  • If formulas were required, verify formulas are present, not just pasted values.
  • If a filtered dataset was requested, verify row counts and selected columns.
  • If a renamed file was requested, verify the actual output name.

7) Report with evidence

When you finish, cite the exact artifact path and the validation you performed.

Good completion style:

  • “Created output/final.xlsx.”
  • “Verified it exists and is non-empty.”
  • “Confirmed workbook contains sheets Summary and Data.”
  • “Checked that computed totals are present in column F.”

This reduces false positives where an output was produced but not actually checked.

Shell patterns to reuse

Minimal discovery sequence

pwd ls -la find . -maxdepth 3 -type f | sort

find . -type f \( -iname "*.xlsx" -o -iname "*.csv" -o -iname "*.tsv" \) | sort

Multi-root search with graceful fallback

find . /workspace /mnt/data -type f 2>/dev/null | sort

Output creation and validation

mkdir -p output some_command > output/result.txt test -f output/result.txt && test -s output/result.txt && echo "validated"

Practical decision rules

Prefer this

  • pwd to anchor yourself
  • find from . or other verified roots
  • explicit output directories
  • post-generation checks tied to the requested deliverable

Avoid this

  • guessing user-centric folders
  • searching the entire filesystem first
  • declaring success after creation without inspection
  • reporting only the command you ran instead of what you verified

Example end-to-end pattern

  1. Discover roots: pwd && ls -la

  2. Find candidate inputs: find . -type f \( -iname "*.xlsx" -o -iname "*.csv" \) | sort

  3. Create controlled output location: mkdir -p output

  4. Generate artifact: python transform.py input/source.csv output/final.csv

  5. Validate artifact exists and inspect content: ls -l output/final.csv test -s output/final.csv head -n 5 output/final.csv

  6. Validate requirement-specific properties:

    • expected headers present,
    • row count reasonable,
    • transformations applied.

Success criteria

This pattern is applied correctly when:

  • file discovery starts from confirmed accessible roots,
  • no critical step depends on unverified assumed directories,
  • generated artifacts are written to known locations,
  • outputs are explicitly inspected or checked,
  • final reporting includes evidence of validation.

© HKUDS, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file in benchmarks/gdpval/skills/sandbox-file-discovery-and-validation of HKUDS/OpenSpace.

  • SKILL.md
  • .skill_id

Open the folder on GitHubat commit 3827781

Compare with similar skills

Sandbox File Discovery And Validation next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Sandbox File Discovery And Validation compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Sandbox File Discovery And Validation this skillHKUDS/OpenSpace7.8k—~1.7kAutomated safety check: PassMIT
MarkitdownImCa0/just-laws78114 repos~3.2kAutomated safety check: NotesMIT
GenOffice Document CLIgenspark-ai/genoffice9.2k—~19kAutomated safety check: PassApache-2.0
Data Table Managern8n-io/n8n207k—~2.3kAutomated safety check: PassCustom licence
Docx4jplutext/docx4j2.4k—~2.5kAutomated safety check: PassNone
Instrument Data To Allotropeaws-samples/amazon-bedrock-agents-healthcare-lifesciences2742 repos~2.7kAutomated safety check: PassApache-2.0

Similar skills

  • Markitdown

    ImCa0/just-laws

    Convert files and office documents to Markdown. An agent skill from ImCa0/just-laws.

    781 GitHub starsUsed in 14 repos~3.2k tokens
    Documents & OfficeAuto-check: notes
  • GenOffice Document CLI

    genspark-ai/genoffice

    Creates, converts, reads and edits real pptx, xlsx, docx and PDF files locally through the genoffice command line.

    9.2k GitHub stars~19k tokensUpdated yesterday
    Documents & OfficeAuto-check passed
  • Official

    Load before calling data-tables or parse-file. An agent skill from n8n-io/n8n.

    207k GitHub stars~2.3k tokensUpdated today
    Documents & OfficeAuto-check passed
  • Docx4j

    plutext/docx4j

    A skill your agent uses when writing Java code that creates, reads or edits Word (.docx), PowerPoint (.pptx) or Excel (.xlsx) files with docx4j — including generating documents, editing existing…

    2.4k GitHub stars~2.5k tokensUpdated today
    Documents & OfficeAuto-check passed
  • Instrument Data To Allotrope

    aws-samples/amazon-bedrock-agents-healthcare-lifesciences

    Official

    Convert laboratory instrument output files (PDF, CSV, Excel, TXT) to Allotrope Simple Model (ASM) JSON format or flattened 2D CSV.

    274 GitHub starsUsed in 2 repos~2.7k tokens
    Documents & OfficeAuto-check passed
  • Cyber Ppt

    crazyykhllc-bit/CyberPPT

    当用户需要把 DOCX、PDF、TXT、XLSX、研究报告、业务材料或原始数据转成高密度、可编辑、咨询风格 PPTX 时使用;也适用于需要 SCR 论证、视觉风格探索、详细图表和渲染质检的 PPT。

    1.8k GitHub stars~10k tokensUpdated 2 mo ago
    Documents & OfficeAuto-check passed

More from HKUDS/OpenSpace

All 199 skills in this repo
  • Walks through producing a master audio track plus stems in Python, from checking a reference file and timing sections by BPM to effects, a zip archive and final verification.

    7.8k GitHub stars~2.9k tokensUpdated 1 mo ago
    Auto-check passed
  • Handle cascading data retrieval tool failures by falling back to embedded knowledge generation

    7.8k GitHub stars~765 tokensUpdated 1 mo ago
    Auto-check passed
  • Gives an agent a workaround when its code-execution sandbox keeps failing: save the Python script to a file and run it through the shell instead.

    7.8k GitHub stars~588 tokensUpdated 1 mo ago
    Auto-check passed
  • A recovery routine for agents whose sandboxed code runner keeps failing: save the Python script to disk, then run it through the shell and read the output.

    7.8k GitHub stars~652 tokensUpdated 1 mo ago
    Auto-check passed
  • Fallback ladder for failed sandboxed code runs, plus the habit of fixing the working directory first so generated files land in the right place.

    7.8k GitHub stars~1.1k tokensUpdated 1 mo ago
    Auto-check passed
  • Fallback workflow for executing Python code when executecodesandbox fails repeatedly

    7.8k GitHub stars~1.1k tokensUpdated 1 mo ago
    Auto-check passed

Works with

Questions about Sandbox File Discovery And Validation

What does Sandbox File Discovery And Validation do?

Use shell tools safely in sandboxed environments by discovering files from real workspace roots instead of assumed user folders, then explicitly verifying output artifacts after generation. Sandbox File Discovery And Validation is an agent skill from HKUDS/OpenSpace. Use shell tools safely in sandboxed environments by discovering files from real workspace roots instead of assumed user folders, then explicitly verifying output artifacts after generation.

When should I use Sandbox File Discovery And Validation?

Sandbox File Discovery And Validation fits situations like: documents & Office work in your project.

How do I install Sandbox File Discovery And Validation in Claude Code?

Run `npx skills add HKUDS/OpenSpace --skill sandbox-file-discovery-and-validation -a claude-code`. Or copy the skill folder (benchmarks/gdpval/skills/sandbox-file-discovery-and-validation in HKUDS/OpenSpace) into .claude/skills/sandbox-file-discovery-and-validation in your project. Claude Code loads it when a task matches its description.

How do I install Sandbox File Discovery And Validation in Codex?

Run `npx skills add HKUDS/OpenSpace --skill sandbox-file-discovery-and-validation -a codex`. Or copy the skill folder (benchmarks/gdpval/skills/sandbox-file-discovery-and-validation in HKUDS/OpenSpace) into .agents/skills/sandbox-file-discovery-and-validation in your project. Codex loads it when a task matches its description.

Can I use Sandbox File Discovery And Validation in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add HKUDS/OpenSpace --skill sandbox-file-discovery-and-validation -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/sandbox-file-discovery-and-validation, .gemini/skills/sandbox-file-discovery-and-validation, .github/skills/sandbox-file-discovery-and-validation and .opencode/skills/sandbox-file-discovery-and-validation in your project.

What does Sandbox File Discovery And Validation need to run?

Going by SKILL.md and its folder, Sandbox File Discovery And Validation needs the command-line tools its instructions call (python). Our summary lists: Python 3.

Does Sandbox File Discovery And Validation access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Sandbox File Discovery And Validation safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Sandbox File Discovery And Validation use?

Sandbox File Discovery And Validation is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Sandbox File Discovery And Validation use?

About 1.7k tokens (SKILL.md is roughly 6.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Sandbox File Discovery And Validation?

Skills that share tags, products or a category with Sandbox File Discovery And Validation: Markitdown (ImCa0/just-laws, 781 stars), GenOffice Document CLI (genspark-ai/genoffice, 9.2k stars), Data Table Manager (n8n-io/n8n, 207k stars) and Docx4j (plutext/docx4j, 2.4k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Sandbox File Discovery And Validation?

HKUDS (a GitHub organization) maintains it in HKUDS/OpenSpace, which has 7,754 GitHub stars. The repository holds 199 skills in this directory. The repository was last updated on August 12, 2026.

Source: HKUDS/OpenSpace on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.