casefile
Use when tracking security investigations, bug bounty findings, CTF leads, audit evidence, exploit chains, dead ends, or reports in the Casefile ledger through Codex.
- License 许可
- MIT
- 最近更新
- 2026-11-11
- Stars
- ★ 1.6k
- Forks
- 468
01 前言 Front Matter
- name
- casefile
- license
- MIT
- description
- Use when tracking security investigations, bug bounty findings, CTF leads, audit evidence, exploit chains, dead ends, or reports in the Casefile ledger through Codex.
03 SKILL.md 正文
Casefile
Use Casefile to maintain durable security investigation state across Codex turns. Prefer the MCP tools from the casefile server when they are available.
Workflow
- Check existing cases before opening a new one with
casefile_listorcasefile_search. - Open new leads with
casefile_addashypothesisorinvestigating. - Promote cases with
casefile_updateonly after materially new evidence, proof, impact, blockers, remediation, or status changes. - Mark
confirmedonly when evidence and a PoC or repro are recorded. - Use
casefile_linkandcasefile_unlinkfor exploit chains. Do not edit linked case IDs directly. - Use
casefile_reportonly for confirmed or already reported cases. - Use
killedfor disproven, duplicate, or dead-end leads, and include evidence, blockers, next step, or assumptions explaining why.
Tool Map
casefile_add: create a new case.casefile_update: update an existing case.casefile_get: read one case by ID.casefile_list: list cases with filters and pagination.casefile_search: search all fields or a scoped field such asevidence,impact, orpoc.casefile_link: bidirectionally link two cases.casefile_unlink: remove a bidirectional case link.casefile_report: write a markdown report for a confirmed or reported case.
Storage
The Codex plugin uses project-scoped storage by default at .casefile/casefile.jsonl. Use CASEFILE_PATH to force a specific ledger path or CASEFILE_SCOPE=global to use ~/.casefile/casefile.jsonl.
Legacy pi environment variables remain supported for the pi extension.
04 同仓库更多 Skills
deja-search
deja-vu memory — search the user's past AI coding sessions with the deja CLI. Holds what they already settled and never wrote into the repo (naming rules, banned or already-tried tools, required checks before merge, preferred values, who owns what). Use before your first edit in a task, before you call a change done or ready to merge, before you recommend a tool, library, design or reviewer, before re-debugging an error that may already be solved, when they say 'didn't we fix this before', 'what did we decide about X' or 'I already have that', and before telling them something on this machine does not exist.
deja-reflect
End-of-session reflection and memory curation with deja-vu. Review what was decided, what commands broke and what repaired them, and record durable project rules or decisions with deja remember so the next session starts with them.
revid
Make, edit, export and post AI videos with Revid (revid.ai) through the Revid MCP server. Use whenever the user wants a short-form or long-form video made (from an idea, a script, a URL, an article, a PDF, a tweet, a product page, their own clips, or a song), wants to find what is going viral on TikTok, YouTube, Instagram or X before making something, wants to edit or re-export an existing Revid project, generate a standalone AI image or clip, make a series episode, or publish and schedule a finished video to connected social accounts. Covers setup (hosted MCP with OAuth, or an API key), the 36 tools, credits, polling and the rules for publishing. Routes to the more specific revid-* skills when one fits.
review-study
Review a QuestionPunk survey before launch for wording, answer choices, branching, and missing settings. Use for check my survey or review this draft before publishing.
manage-study
Find QuestionPunk studies, check status, publish an explicitly requested draft, or retrieve its participant link. Use for find my survey, publish this study, or how many people responded.
create-study
Create a saved QuestionPunk survey draft from a research brief or edit specified questions. Use for requests such as make a customer feedback survey or shorten my onboarding study.