plugin development - Questions about meta box: nonce and parameters available in WordPress

Not sure aboutnces.

As for arguments it is probably their usage of add_meta_box() :

$callback_args (array) (optional) Arguments to pass into your callback function. The callback will receive the $post object and whatever parameters are passed through this variable. Default: null

So $post is post object and $box is whatever they are passing in $callback_args