Add AgentBox to Development & Workflow

[madarco]

Adds AgentBox (https://github.com/madarco/agentbox, MIT) to Community Plugins → Development & Workflow (alphabetical, after Aegis).

AgentBox drives Codex from the host to run coding agents in parallel, each in its own sandboxed box — local Docker or cloud VMs (Hetzner/Daytona/Vercel/E2B) — with sub-1s checkpoint starts, a per-box browser + VS Code, and git credentials kept on the host.

Included: self-contained bundle at plugins/madarco/agentbox/ — .codex-plugin/plugin.json (with interface.composerIcon), assets/icon.svg (512×512), a host-side skill (skills/agentbox), README, SECURITY.md, LICENSE (MIT), .codexignore. Passes validate-plugin-pr.py and check-alphabetical.py locally.

Note on sync: the .codex-plugin/ manifest is also being added to the AgentBox repo itself (madarco/agentbox#72). generate_plugins_json.py mirrors bundles from the upstream repo archive, so please merge that PR first (or alongside) this one so the marketplace sync picks up .codex-plugin from madarco/agentbox's default branch.

[gemini-code-assist]

Code Review

This pull request registers a new third-party plugin called "AgentBox" to run coding agents in parallel, sandboxed environments. It adds the plugin metadata, a host-side skill, documentation, and assets. The review feedback correctly identifies that the skills directory is misplaced inside the .codex-plugin directory instead of the plugin root, which will prevent Codex from resolving the skill path defined in plugin.json.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[gemini-code-assist]

The skill file is currently placed at plugins/madarco/agentbox/.codex-plugin/skills/agentbox/SKILL.md. However, according to the standard plugin anatomy and your own README.md (which references skills/agentbox), the skills directory should be located at the root of the plugin (plugins/madarco/agentbox/skills/agentbox/SKILL.md). Because "skills": ["./skills/"] in plugin.json is resolved relative to the plugin root, Codex will not be able to find the skill in its current location inside .codex-plugin/. Please move the skills directory to the root of the plugin.

[madarco]

makes sense, fixed 👍

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (6 files)

• README.md - alphabetical insertion verified
• plugins/madarco/agentbox/.codex-plugin/plugin.json - manifest valid, skills path resolves correctly
• plugins/madarco/agentbox/.codexignore - standard ignores
• plugins/madarco/agentbox/LICENSE - MIT license
• plugins/madarco/agentbox/README.md - plugin documentation
• plugins/madarco/agentbox/SECURITY.md - security contact
• plugins/madarco/agentbox/assets/icon.svg - brand asset
• plugins/madarco/agentbox/skills/agentbox/SKILL.md - host-side skill

---

_{Reviewed by laguna-m.1-20260312:free · 1,335,669 tokens}

[internet-dot]

Missing the required index entries. You have the plugin bundle under plugins/madarco/agentbox/ which looks good, but you need:\n- plugins.json entry (missing)\n- .agents/plugins/marketplace.json entry (missing)\n\nSee CONTRIBUTING.md.

[internet-dot]

Before this PR can be merged, your plugin repo needs the HOL AI Plugin Scanner running in CI. This is a mandatory requirement for all submissions.

Add this workflow to your plugin repo at .github/workflows/hol-plugin-scanner.yml:

name: HOL Plugin Scanner

on:
  push:
    branches: [main, master]
  pull_request:
    branches: [main, master]

permissions:
  contents: read
  security-events: write

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      - name: HOL Plugin Scanner
        uses: hashgraph-online/ai-plugin-scanner-action@v1
        with:
          plugin_dir: "."
          mode: scan
          min_score: 80
          fail_on_severity: high
          format: sarif
          upload_sarif: true

Also run the scanner locally and include the score in your PR description:

pipx install plugin-scanner
plugin-scanner scan . --format text

Your plugin needs a score of 80/130 or higher with no critical or high severity findings. Link the CI run or paste the score in this PR description.

See the full guide: SCANNER_GUIDE.md

Additional issues:
plugins.json and marketplace.json entries are missing from this PR.

[internet-dot]

Two issues:

1. Stale plugins.json total — PR sets total to 99, but main currently has 105+. This will cause a merge conflict and is incorrect. Please rebase on main and use the correct current total.

2. No scanner evidence — PR description lacks scanner score or CI link.

Bundle structure is solid otherwise: plugin.json, icon, SKILL.md, marketplace.json, and README entry all present. Alphabetical order is correct.

[internet-dot]

✅ Clean PR

• Valid JSON in all modified files (marketplace.json, plugins.json)
• README entry added alphabetically (AgentBox after Aegis, before Agentizer)
• Complete bundle structure with .codex-plugin/plugin.json, assets/icon.svg, README.md, and skill
• Minor .gitignore addition for pycache is reasonable

Ready to merge.