Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add pnp/sharepoint-skills --skill copilot-toolboxgit clone --depth 1 https://github.com/pnp/sharepoint-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/pnp/sharepoint-skills/copilot-toolbox)<a href="https://agentmods.dev/skills/pnp/sharepoint-skills/copilot-toolbox"><img src="https://agentmods.dev/badge/skills/pnp/sharepoint-skills/copilot-toolbox/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/pnp/sharepoint-skills/copilot-toolbox"><img src="https://agentmods.dev/badge/skills/pnp/sharepoint-skills/copilot-toolbox.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00120 | $0.03014 |
| Opus 5.5 | $0.00048 | $0.01206 |
| Sonnet 5.5 | $0.00024 | $0.00603 |
| Haiku 4.5 | $0.00012 | $0.00301 |
Grade A, and why
copilot-toolbox scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 22d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 202 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Copilot Toolbox
When to use
Use this portable workflow to install, synchronize, repair, review, or publish the English copilot-toolbox solution on the current SharePoint site unless another site is named.
- The generic list
copilot-toolboxis the installation marker. - If absent, provision the complete solution and import the current catalog.
- If present, never recreate existing artifacts; synchronize, repair, or publish as requested.
- Never create, replace, edit, or designate
Home.aspxas the site home page. - Never hard-code site URLs, list/view IDs, timestamps, page URLs, library paths, or tool counts.
Inputs
- Target list:
copilot-toolbox. - Authoritative identities and short descriptions: complete current tool catalog plus supplied
--agenttoolswhere present. - Mandatory enrichment source: complete
learn_toolresult for every current tool, including direct tools. - Identity key: exact
Title, compared trimmed and case-insensitive. - Lifecycle:
new,active,archived,removed. - Page:
Toolbox.aspxin Site Pages. - Publication:
copilot-toolbook-en.htmlin the current site's runtime-resolved standard document library (Documentsor its localized equivalent, such asDokumente).
Managed fields:
| Field | Required rule |
|---|---|
Title |
Exact tool identity; display name Tool Name. |
description |
Original short catalog description unchanged. |
Category |
Most specific verified functional family. |
UseCase |
Learned When to invoke, When not to invoke, Usage notes, in that order. |
Example |
Concrete valid English request specific to the tool. |
PromptTemplate |
Capability-specific reusable request with meaningful placeholders. |
KeyParameters |
Every exact learned input name and concise verified meaning. |
Status |
new, active, archived, or removed. |
Tags |
Conservative English search terms. |
Source |
tool-catalog, --agenttools, manual, or generated. |
FirstSeen |
Initial verified detection; preserve existing populated values. |
LastSeen |
Current verified detection. |
RemovedOn |
Set only for removed tools. |
workstep |
Quick Steps column for deterministic review. |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 22d ago First seen · 202 lines · 120 tokens per session scan A 0e0c69a3164a
copilot-toolbox is a skill published in the GitHub repository pnp/sharepoint-skills (137 stars, last pushed yesterday), licensed MIT. It adds 120 tokens to every session and 3,014 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-25.
Other skills, from other repositories
html-ppt-hermes-cyber-terminal
OpenDesign + BYOK: choosing and wiring your own model, hands-on — cost, quality, and the routing decision. Built as a decision-grade AI literacy deck for engineers, IT, applied-AI teams.
skill-doc-delivery
Convert markdown to DOCX, PPTX, XLSX, PDF office documents — use when you need exportable deliverables.
skill-writing-plans
Create zero-context implementation plans with bite-sized tasks — use for multi-step feature planning.
go-testing
Trigger: Go tests, go test coverage, Bubbletea teatest, golden files. Apply focused Go testing patterns.
bf-to-agents-sdk-dotnet-migration
Use when migrating a Bot Framework .NET SDK bot to Microsoft 365 Agents SDK. Triggered by projects that depend on packages: Microsoft.Bot.Builder or Microsoft.Bot.Builder.Integration.AspNet.Core that want to migrate to Agents SDK.
threejs-textures
Three.js textures - texture types, UV mapping, environment maps, texture settings. Use when working with images, UV coordinates, cubemaps, HDR environments, or texture optimization.