Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/wyre-ai/msp-claude-plugins/mailboxesnpx skills add WYRE-AI/msp-claude-plugins --skill mailboxesgit clone --depth 1 https://github.com/WYRE-AI/msp-claude-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/wyre-ai/msp-claude-plugins/mailboxes)<a href="https://agentmods.dev/skills/wyre-ai/msp-claude-plugins/mailboxes"><img src="https://agentmods.dev/badge/skills/wyre-ai/msp-claude-plugins/mailboxes.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00051 | $0.01077 |
| Opus 5 | $0.00026 | $0.00539 |
| Sonnet 5 | $0.00010 | $0.00215 |
| Haiku 4.5 | $0.00005 | $0.00108 |
Grade A, and why
cipp-mailboxes scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 102 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CIPP Mailboxes
Exchange Online mailbox operations through CIPP. The four supported tools cover the highest-frequency MSP mailbox tasks: listing mailboxes for inventory, auditing permissions during BEC investigations, setting OOO for leave/offboarding, and configuring forwarding for transition periods.
Anti-triggers
- The BEC investigation report itself —
cipp_bec_checkis incipp-users. This skill covers the mailbox layer of the remediation that follows it. - A whole offboard —
cipp_offboard_userincipp-userssets OOO, forwarding, and shared-mailbox conversion in one call; reach for the individual tools here only when you need step-by-step control. - Inbox rules, transport rules, mail flow, or quarantine — none are
in CIPP's MCP surface. Use the
m365plugin (Microsoft 365 Mailboxes) or Exchange Online PowerShell. - Who signed in to or accessed a mailbox — that is unified audit
log territory; use
cipp-alerts.
Tools
cipp_list_mailboxes
cipp_list_mailboxes(tenantFilter='contoso.onmicrosoft.com')
Returns all mailboxes (User, Shared, Resource, Equipment, Room) with userPrincipalName, recipientTypeDetails, archiveStatus, litigationHoldEnabled, and storage usage. Use as the entry point for any mailbox audit.
cipp_list_mailbox_permissions
cipp_list_mailbox_permissions(tenantFilter, userPrincipalName='[email protected]')
Lists all delegates and full-access trustees on a mailbox. Critical during BEC investigations — attackers commonly grant themselves Full Access or add a forwarding rule. Always run this on a compromised mailbox before remediation.
cipp_set_out_of_office
cipp_set_out_of_office(tenantFilter, userPrincipalName,
enabled=true|false,
internalMessage?, externalMessage?,
startTime?, endTime?)
Use during offboarding (permanent), planned leave (scheduled), or as a tactical control after disabling an account so external senders get a clear bounce-equivalent.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 102 lines · 51 tokens per session scan A 0dfd8fe3680f
cipp-mailboxes is a skill published in the GitHub repository WYRE-AI/msp-claude-plugins (44 stars, last pushed 3d ago), licensed Apache-2.0. It adds 51 tokens to every session and 1,077 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other skills, from other repositories
houseclean
Cross-drive storage audit and cleanup. Surveys all drives, finds orphaned git worktrees, large AI tool caches (.ollama, .gemini, .cursor, npm, pip), and buildable artifacts (nodemodules, .venv). Produces a prioritized action plan with specific migration commands. Use when disk space is low or worktrees need cleanup…
schedule
Manages recurring and one-off scheduled tasks. Session-scoped scheduling via CronCreate/CronDelete/CronList. Documents the cloud path for tasks that need to survive machine sleep or network drops.
career-portfolio
한국 신입 취준생·재직자를 위한 분야별 포트폴리오 구성과 프로젝트 기술서 작성 스킬입니다. "포트폴리오 만들어줘", "프로젝트 정리해줘", "노션 포트폴리오 1시간 만에"처럼 말하면 됩니다. 개발(GitHub·기술 블로그)/디자인(Figma·Behance)/마케팅/기획 분야별 + 검색되는 노션 포트폴리오 + 채용공고 맞춤형 1page 셀링 + 877건 노하우 기반 비중 배분을 지원합니다.
marketing-meta-ads-manager
페이스북·인스타그램 광고를 자연어로 직접 만들고 켜고 끄고 예산까지 조정해 드립니다. Meta 공식 광고 AI 커넥터에 브라우저 로그인 한 번으로 연결되며, 신규 광고는 항상 꺼진(PAUSED) 상태로 만들고 켜기 전에 꼭 확인을 받습니다. 다음과 같은 요청 시 사용하세요: "메타 광고 만들어줘", "인스타 광고 캠페인 생성해줘" "광고세트 추가해줘", "새 광고 소재 등록해줘" "일예산 5만원으로 올려줘", "광고 예산 변경해줘" "광고 켜줘", "광고 꺼줘", "캠페인 일시정지해줘" "Meta 광고 운영해줘", "AI 커넥터로 광고 관리해줘" "전환 픽셀…
hr-operations
원격 근무와 팀 운영 정책을 설계해주는 스킬입니다. "재택근무 정책 만들어줘", "협업 도구 추천해줘", "비동기 커뮤니케이션 가이드 만들어줘"처럼 말하면 됩니다. 원격·하이브리드 근무 정책, 협업 도구 선정 기준, 생산성 관리 프레임워크, 직원 경험 설계를 지원합니다.
collab-conflict
까다로운 동료·소통빌런과 부딪힐 때 감정 상하지 않게 대응하고 거리를 지키도록 도와주는 스킬입니다. '이 사람 어떻게 대하지', '자꾸 떠넘기는 동료', '거절하는 법', '직장 인간관계 스트레스', '갈등 대응'처럼 말하면 됩니다. 유형별 대응 전략, 감정과 사안 분리, 정중한 거절, 관계 거리 두기로 직장 갈등을 소모전이 아니라 관리 가능한 문제로 바꿉니다.