feat: add llm-box plugin

[alib8b8]

Add Plugin

Plugin name: llm-box
Source: https://github.com/alib8b8/llm-box
License: MIT
Category: development
Type / tags: skills, commands, mcp-servers, workflow, automation, cli, yaml, llm

Checklist

• I have read and understood the contributing guidelines
• Plugin has a valid .claude-plugin/plugin.json manifest
• Plugin has a README.md
• Plugin has a LICENSE
• Plugin name is kebab-case
• category is set to one of the allowed values
• tags includes at least one component type (skills/agents/hooks/commands/mcp-servers/lsp-servers/integration/other)
• Plugin file added to plugins/ directory (do not edit marketplace.json)
• Tested locally with /plugin marketplace add and /plugin install

What does this plugin do?

llm-box is a terminal-first workflow automation engine that generates and executes YAML workflows from plain English descriptions.

Key features:

• Natural language to YAML workflow generation
• 20+ built-in nodes (fetch_url, http_request, execute, json_parse, file operations, etc.)
• 15+ LLM providers (Ollama, DeepSeek, OpenAI-compatible, and more)
• Built-in MCP server mode (stdio + HTTP/SSE for remote access)
• 3 slash commands: /create-workflow, /run-workflow, /list-nodes
• 2 skills: workflow (auto-activated) + setup (user-invoked)
• Safe mode for restricted execution environments

Security features:

• SSRF protection on URL fetching (blocked private/local IP ranges)
• Path traversal protection on file operations
• Command injection prevention via argument list execution
• Confirmation gates for destructive operations

Files included:

• .claude-plugin/plugin.json + marketplace.json
• skills/llm-box/SKILL.md (workflow skill, auto-activated)
• skills/setup/SKILL.md (setup/installation skill)
• commands/ (3 slash commands)
• .mcp.json
• README.md + README.zh-CN.md