Juicebox Core Workflow BSAFE
Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
Overview
Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
4f83675ca38aOBSERVED · 2026-10-09Host compatibility
What the documentation claims. We have not run a compatibility test.
| Host | Status | Notes |
|---|---|---|
| claude-code | mentioned |
What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: juicebox-core-workflow-b description: 'Execute Juicebox enrichment and outreach workflow. Trigger: "juicebox enrich", "candidate enrichment", "talent pool". ' allowed-tools: Read, Write, Edit, Bash(npm:*), Grep version: 1.16.0 license: MIT author: Jeremy Longshore <[email protected]> tags: - saas - recruiting - juicebox compatibility: Designed for Claude Code --- # Juicebox — Advanced Analysis ## Overview Build custom queries, apply multi-dimensional filters, and run cross-dataset analysis on your Juicebox people-intelligence data. Use this workflow when you need to go beyond standard search — comparing candidate pools across roles, analyzing skill density by geography, or identifying talent trends over time. This is the secondary workflow; for basic search and enrichment, see `juicebox-core-workflow-a`. ## Instructions ### Step 1: Build a Custom Query with Filters ```typescript const query = await client.analysis.query({ dataset: 'candidates', filters: [ { field: 'skills', operator: 'contains_any', value: ['TypeScript', 'Rust', 'Go'] }, { field: 'experience_years', operator: 'gte', value: 5 }, { field: 'location.country', operator: 'eq', value: 'US' }, ], sort: { field: 'relevance_score', order: 'desc' }, limit: 100, }); console.log(`Found ${query.total} candidates matching filters`); query.results.forEach(c => console.log(` ${c.name} — ${c.title} (${c.relevance_score}/100)`) ); ``` ### Step 2: Run Cross-Dataset Comparison ```typescript const comparison = await client.analysis.compare({ datasets: ['candidates_q1_2026', 'candidates_q4_2025'], group_by: 'primary_skill', metrics: ['count', 'avg_experience', 'avg_salary_estimate'], }); comparison.groups.forEach(g => console.log(`${g.skill}: Q1=${g.datasets[0].count} vs Q4=${g.datasets[1].count} (${g.delta > 0 ? '+' : ''}${g.delta}%)`) ); ``` ### Step 3: Aggregate Skill Density by Region ```typescript const density = await client.analysis.aggregate({ dataset: 'candidates', group_by: 'location.metro_area', metric: 'skill_density', skill_filter: ['ML Engineering', 'Data Science'], top_n: 10, }); density.regions.forEach(r => console.log(`${r.metro}: ${r.candidate_count} candidates, density=${r.density_score}`) ); ``` ### Step 4: Export Analysis Results ```typescript const exportJob = await client.analysis.export({ query_id: query.id, format: 'csv', fields: ['name', 'email', 'primary_skill', 'experience_years', 'location'], }); console.log(`Export ready: ${exportJob.download_url} (${exportJob.row_count} rows)`); ``` ## Error Handling | Issue | Cause | Fix | |-------|-------|-----| | `400 Invalid filter` | Unsupported operator for field type | Check field schema with `client.schema.fields()` | | `404 Dataset not found` | Stale dataset ID or typo | List datasets with `client.datasets.list()` | | `408 Query timeout` | Too many filters on large dataset | Add `limit` or narrow date range | | `429 Rate limited` | Exceeded analysis quota | Implement backoff; check plan limits | | Partial comparison data | One dataset has sparse coverage | Expected — use `include_nulls: true` for completeness | ## Output A successful workflow produces filtered candidate lists with relevance scores, cross-dataset comparison tables showing talent market shifts, and regional skill-density rankings. Results can be exported as CSV for downstream reporting. ## Prerequisites - An approved analysis purpose, sandbox datasets containing only synthetic records, source/destination allowlists, a suppression check, and a named owner for review and rollback. ## Examples Run the comparison in `workspace=ci-synthetic`, restrict output to aggregate metrics, verify `suppression=pass; contacts_exported=0`, then delete the staged dataset after the redacted receipt is approved. ## Resources - Juicebox API Docs ## Next Steps See `juicebox-sdk-patterns` for authentication and query builder helpers.
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
4f83675ca38afull audit observations/trust-audit/skill/jeremylongshore__juicebox-core-workflow-b.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-09 | 4f83675ca38a | SAFE | B | 89 | first audit |
Questions
What does the Juicebox Core Workflow B skill do?
Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
Is Juicebox Core Workflow B safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Juicebox Core Workflow B access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does Juicebox Core Workflow B work with?
Its documentation mentions claude-code. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (4f83675ca38a), read on 2026-10-09. The repository is watched, and a new audit runs when it changes — this is the first audit.