SkillAgentSearch skills...

vibebox

A local blackbox for AI coding sessions.

Install / Use

npx skills add boksajang/vibebox

Installs into whichever agent you are using.

About this skill
๐Ÿ“„

SKILL.md

Installable skill definition

Quality Score

77/100

Category

Automation

Supported Platforms

OpenAI Codex

Our assessment of vibebox

vibebox scores 77/100 on our quality scale, 2572nd of 2,881 Automation skills we index.

Its SKILL.md is 13 KB long, well organised into 16 sections with 13 code examples: a thorough specification that gives an agent plenty to work with.

It has 8 GitHub stars, so there is little community track record yet; judge it on its content.

Substance
30/30
Structure
20/20
Description
8/15
Adoption
4/20
Freshness
15/15

Maintenance, license and trust

  • The repository was last updated about 2 months ago, so vibebox is actively maintained.
  • Our last check on 2026-09-26 found the source still online.
  • It is released under the MIT license, a permissive license that allows use, modification and commercial use with attribution.
  • Its trust signals score 87/100, with 2 cautions from licensing, adoption, age or documentation. These come from repository metadata, not a code audit โ€” read the skill file before letting an agent act on it.

Safety scan

No issues found

Our scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful.

AI review by kimi-k2.7-code on 2026-09-24. Automated pattern scan on 2026-09-24. It catches known dangerous patterns, not every risk โ€” read a skill before letting an agent act on it.

vibebox compared with similar skills

All 4 of these similar skills score higher than vibebox; compare them before choosing.

SkillScoreStarsUpdatedFormat
vibebox (this skill)by boksajang77852d agoSKILL.md
Agent-Reachby Panniantong10097.0k5d agoCLAUDE.md
Scraplingby D4Vinci10087.3ktodayMCP Server
rufloby ruvnet10074.5ktodayMCP Server
algorithmic-artby anthropics100177.9k21d agoSKILL.md

Frequently asked questions

How do I install vibebox?
Run npx skills add boksajang/vibebox. The install tabs above show the steps for each supported agent.
Which AI agents does vibebox work with?
It is written for OpenAI Codex, as a SKILL.md file. Other agents that read the same format can often use it too.
Is vibebox safe to use?
Our scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful. It is MIT-licensed and scores 87/100 on trust signals. Skills are instructions an agent will follow, so read the file before installing it and do not approve commands you do not understand.
Is vibebox still maintained?
The repository was last updated about 2 months ago, so vibebox is actively maintained.

VibeBox

VibeBox hero

VibeBox is local-first memory middleware for AI coding agents.

It helps an agent remember durable user preferences, project rules, validation habits, failure-avoidance rules, and reusable successful approaches without turning the project repository into a memory store.

What It Is

VibeBox sits beside an AI coding workflow:

  1. Before work, the agent runs vibebox pretask or vibebox context.
  2. The agent reads active guidance and applies it while inspecting the repository.
  3. After meaningful work, the agent runs vibebox aftertask.
  4. The agent supplies the original userRequest plus structured memory candidates.
  5. VibeBox Core validates, stores, dedupes, indexes, links, and renders those candidates.

VibeBox workflow diagram

The semantic contract is simple: the AI agent interprets the user's request and creates structured candidates. VibeBox Core does not decide meaning from raw text, summaries, keywords, headings, or command output.

Why It Helps

AI coding agents often repeat the same mistakes across sessions: changing files the user wanted preserved, skipping validation, forgetting preferred workflows, or reusing an approach the user rejected.

VibeBox turns those reusable lessons into active guidance:

  • User Success Criteria: what a good result means for the user.
  • AI Failure Avoidance: mistakes, tool failures, and rejected directions to avoid.
  • AI Successful Approaches: reusable methods that worked before.

Past memory is context, not authority. The current user request always wins.

pretask always carries active global user-profile baselines such as durable personal, design, coding, and response preferences, even when the current task wording has no direct lexical overlap. Project-specific guidance still takes priority, and other global technical memory remains relevance-filtered. Localized display fields also participate in matching, so a user-language task can retrieve memory whose canonical fields use another language. Agents do not need to run the full report command to compensate for a filtered Pre-Task Brief; report is an audit view.

Quick Start

Requirements:

  • Node.js 20 or newer
  • npm

Windows Beginner Install

Use this path when Codex is already installed and you want to install VibeBox from GitHub on Windows.

Open PowerShell and run:

codex plugin marketplace add boksajang/vibebox
codex plugin add vibebox@boksajang
codex plugin list

What each command does:

  • codex plugin marketplace add boksajang/vibebox registers the GitHub marketplace with Codex.
  • codex plugin add vibebox@boksajang installs and enables the VibeBox Codex plugin.
  • codex plugin list confirms that vibebox@boksajang is installed and enabled.

The installed plugin bundles VibeBox Core, so a separate clone, npm install, npm link, or global vibebox.cmd command is not required.

You can ask Codex App to complete installation, permission setup, and initialization in one natural-language request:

boksajang/vibebox ํ”Œ๋Ÿฌ๊ทธ์ธ์„ ์„ค์น˜ํ•˜๊ณ  ํ™œ์„ฑํ™”ํ•œ ๋‹ค์Œ,
์„ค์น˜๋œ ๋ฒˆ๋“ค CLI๋กœ setup-codex๋ฅผ ์‹คํ–‰ํ•ด์ค˜.
๊ทธ ๋‹ค์Œ ์ด ๋Œ€ํ™”์—์„œ ๋‚ด๊ฐ€ ์‚ฌ์šฉํ•˜๋Š” ์–ธ์–ด๋ฅผ ํŒ๋ณ„ํ•˜๊ณ , schema์˜
initialization.displayTemplate ์ „์ฒด๋ฅผ ๊ทธ ์–ธ์–ด๋กœ ์ƒ์„ฑํ•ด์„œ
๊ฐ™์€ ๋ฒˆ๋“ค CLI๋กœ init๊นŒ์ง€ ์‹คํ–‰ํ•ด์ค˜.
์™„๋ฃŒ๋˜๋ฉด Codex๋ฅผ ์žฌ์‹œ์ž‘ํ•ด์•ผ ํ•œ๋‹ค๊ณ  ์•Œ๋ ค์ค˜.

Required Codex Setup And Initialization

Plugin installation only copies and enables the plugin package. It does not execute VibeBox Core, grant write access to %USERPROFILE%\.vibebox, or create the store's categories, indexes, and Wiki files.

If you installed the plugin without the combined request above, start a new Codex task and ask:

์„ค์น˜๋œ VibeBox ํ”Œ๋Ÿฌ๊ทธ์ธ์˜ ๋ฒˆ๋“ค CLI๋กœ setup-codex๋ฅผ ์‹คํ–‰ํ•ด์„œ
%USERPROFILE%\.vibebox๋ฅผ Codex writable_roots์— ์ถ”๊ฐ€ํ•œ ๋‹ค์Œ,
์ด ๋Œ€ํ™”์—์„œ ๋‚ด๊ฐ€ ์‚ฌ์šฉํ•˜๋Š” ์–ธ์–ด์˜ ์ •ํ™•ํ•œ BCP 47 ํƒœ๊ทธ๋กœ schema๋ฅผ ์ฝ๊ณ ,
initialization.displayTemplate์˜ ๋ชจ๋“  ๊ฐ’์„ ๊ฐ™์€ ์–ธ์–ด๋กœ ์ƒ์„ฑํ•ด์ค˜.
๊ทธ ํ…œํ”Œ๋ฆฟ๊ณผ ์–ธ์–ด ํƒœ๊ทธ๋ฅผ ๊ฐ™์€ ๋ฒˆ๋“ค CLI์˜ init์— ์ „๋‹ฌํ•ด์„œ ์ „์—ญ ์ €์žฅ์†Œ์˜
์นดํ…Œ๊ณ ๋ฆฌ, ์ธ๋ฑ์Šค, Wiki ๊ธฐ๋ณธ ํŒŒ์ผ์„ ์ƒ์„ฑํ•ด์ค˜.
์™„๋ฃŒ๋˜๋ฉด Codex๋ฅผ ์žฌ์‹œ์ž‘ํ•ด์•ผ ํ•œ๋‹ค๊ณ  ์•Œ๋ ค์ค˜.

setup-codex backs up %USERPROFILE%\.codex\config.toml, adds %USERPROFILE%\.vibebox to [sandbox_workspace_write].writable_roots, and creates the global store directory when it is missing. The agent determines the user's conversation language, generates the complete display template returned by schema --language <canonical-bcp47>, and passes both to init. Core does not contain Korean-only or other hardcoded translation packs.

Restart Codex after both commands succeed, then start another new task so the updated permission and installed hooks are loaded. The first meaningful prompt runs pretask. If the store is still missing, the hook instructs the active AI agent to generate a complete template in the user's language before running init; it never creates an English fallback store. The aftertask checkpoint supplies the installed CLI path for schema and aftertask.

doctor --codex is optional and is only needed to verify the permission setup or diagnose a problem. You can ask Codex:

์„ค์น˜๋œ VibeBox ํ”Œ๋Ÿฌ๊ทธ์ธ์˜ ๋ฒˆ๋“ค CLI๋กœ doctor --codex๋ฅผ ์‹คํ–‰ํ•ด์„œ
์ „์—ญ ์ €์žฅ์†Œ ๊ถŒํ•œ๊ณผ ์ƒํƒœ๋ฅผ ํ™•์ธํ•ด์ค˜.

Agent Plugin Or Skill Use

Install or enable VibeBox through the AI agent surface you use, then start a new agent session.

After the VibeBox plugin or skill is installed, users should not need to run pretask, schema, or aftertask by hand. Ask for coding work normally. The installed agent contract handles the VibeBox workflow:

  • before meaningful repository work, the agent retrieves active guidance from the global VibeBox store;
  • before writing memory candidates, the agent reads the Core-generated structured candidate schema;
  • after meaningful work, the agent captures the original user request, outcome, validation evidence, and AI-agent structured memory candidates;
  • VibeBox Core validates, stores, dedupes, indexes, links, and renders the Wiki automatically when capture succeeds.

This applies to Codex plugin use, Claude Code plugin use, and Claude-compatible skill fallback use. The AI agent remains the semantic authority: it decides which reusable memories to submit, and Core manages those submitted candidates.

Sandboxed hosts may still ask for permission to read or write the single global VibeBox store. That approval is for automatic memory retrieval and capture, not for a manual user workflow.

To pre-authorize the default global store for supported hosts, ask the agent to run the bundled setup command and then restart that host:

vibebox setup-codex
vibebox setup-claude

setup-codex backs up ~/.codex/config.toml, creates it if missing, and adds ~/.vibebox to [sandbox_workspace_write].writable_roots. setup-claude backs up ~/.claude/settings.json, creates it if missing, and adds VibeBox file and command permissions. Use vibebox doctor --codex, vibebox doctor --claude, or vibebox doctor --agent all to inspect these settings.

On first use, the agent or adapter must identify the user's language from the conversation, request the schema for its canonical BCP 47 tag, generate every required display-template value in that language, and pass the template and tag to init. Users should not need to craft VibeBox workflow commands or candidate JSON manually.

Local CLI Development

Use the CLI commands directly only when developing, debugging, or validating VibeBox itself:

git clone https://github.com/boksajang/vibebox.git
cd vibebox
npm install
npm link
vibebox.cmd init
vibebox.cmd doctor

vibebox init and vibebox doctor are maintenance checks for a bare CLI checkout. In normal plugin or skill use, the agent invokes VibeBox during the coding workflow and no additional user setup commands are part of day-to-day memory capture.

Codex Plugin Use

VibeBox includes a Codex plugin package at plugins/vibebox, with the wrapper at plugins/vibebox/.codex-plugin/plugin.json and the shared skill at plugins/vibebox/skills/vibebox/SKILL.md.

Install or register the marketplace source:

codex plugin marketplace add boksajang/vibebox
codex plugin add vibebox@boksajang

Then enable the vibebox plugin in Codex and start a new session if the host does not load the installed plugin immediately.

Codex App can read an installed plugin cache instead of your local checkout. A GitHub push alone does not update that installed cache. After updating local plugin source, run git pull or reinstall the plugin, then verify the cache folder and key file hashes.

Example cache placeholder:

%USERPROFILE%\.codex\plugins\cache\boksajang\vibebox\0.1.13\

VibeBox does not delete or rewrite Codex App plugin cache files automatically.

Claude Code Plugin Use

VibeBox includes a Claude Code plugin manifest at .claude-plugin/plugin.json, a Claude marketplace catalog at .claude-plugin/marketplace.json, and plugin hooks at hooks/hooks.json.

Install from the repository marketplace inside Claude Code:

/plugin marketplace add boksajang/vibebox
/plugin install vibebox@boksajang
/reload-plugins

CLI form:

claude plugin marketplace add boksajang/vibebox
claude plugin install vibebox@boksajang

When the plugin is enabled, the bundled Claude hooks support the normal VibeBox workflow:

  • UserPromptSubmit runs pretask when the store exists. When it is missing, the hook instructs Claude to infer the user's language, generate the complete schema-defined display template in that language, initialize the store, and then run pretask.
  • Stop blocks once with an aftertask checkpoint and supplies the installed CLI's absolute path, so Claude cannot silently finish meaningful work without running schema and aftertask with AI-agent structured candidates.

The hooks do not synthesize memory by themselves. Claude remains responsible for deciding whether reusable memory exists, reading the Core schema before candidate JSON, and submitting structured candidates or no_reusable_memory_candidate.

Claude Code resolves the marketplace source: "./" from the repository root and copies that plugin root into its cache. Because the root includes bin/, src/, package.json, hooks, and skills, Claude plugin installation does not require a separate clone, npm install, npm link, or global vibebox command. Claude may still show normal security prompts for access to ~/.vibebox or execution of the bundled CLI.

Obsidian Wiki

Obsidian wiki screenshot

The Obsidian-compatible wiki is a display layer for user review, not the source of truth. The global store remains the source of truth, and JSON indexes drive retrieval.

Default wiki locations:

<USER_HOME>/.vibebox/wiki
%USERPROFILE%\.vibebox\wiki

Wiki filenames, titles, summaries, aliases, and link labels follow the configured memoryLanguage. memoryLanguage must be the user's actual language as a canonical BCP 47 tag. For every non-default initial language and conversion target, the AI Agent must generate the complete schema-defined display template in that exact language; Core rejects missing templates instead of silently falling back to English. Every recorded memory must also include displayTitle, displaySummary, and displayRule in that language with the matching displayLanguage, or Core rejects it before Wiki rendering.

Runtime Store

VibeBox uses one global store as the single source of truth:

<USER_HOME>/.vibebox

Override it with VIBEBOX_HOME or --store <path> when needed.

VibeBox does not create project-local .vibebox folders, workspace-local snapshots, copied stores, pointer files, or hidden metadata in work repositories.

In sandboxed agents, pretask and context are read-only retrieval commands but still need read access to the global store. aftertask, init, and capture need write access when they register projects, capture events, update active memory, or render wiki files.

Update Workflow

For local source:

git pull
npm install
npm link
vibebox doctor

For Codex

Truncated for display โ€” read the full file on GitHub.

Related Skills

View on GitHub
GitHub Stars8
CategoryAutomation
Updated1mo ago
Forks5

Languages

JavaScript

Trust signals

87/100

From repository metadata: license, adoption, age and documentation. Not a code audit โ€” see the Safety scan above for what the skill file itself contains.

2 low
vibebox โ€” OpenAI Codex Skill: Install & Safety Check | SkillAgent