Casefile

SkillSecurity

Use when tracking security investigations, bug bounty findings, CTF leads, audit evidence, exploit chains, dead ends, or reports in the Casefile ledger through Codex.

Use Casefile in Claude, ChatGPT or Ahel Desktop

Free. Sign in, add Casefile and connect your AI. About a minute.

Claude ChatGPT Ahel Desktop

Also: Claude Code · Cursor · Codex

Then ask your AI: use the Casefile skill

Details

Instructions available. Your AI can read the instructions. Execution depends on the setup they require.

Account requirements not reviewed. Check the skill instructions before use; Ahel provides instructions and does not run this skill.

No other account needed.

Add Ahel to your AI once: Claude, ChatGPT, Cursor, Claude Code or Codex. Then ask it to use this.

CasefileStart free

What this skill tells your AI

The instructions your AI receives, as published by hashgraph-online/awesome-codex-plugins in plugins/x4cc3/casefile/skills/casefile/SKILL.md and read by Ahel’s review.

Use Casefile to maintain durable security investigation state across Codex turns. Prefer the MCP tools from the casefile server when they are available.

Workflow

Check existing cases before opening a new one with casefile_list or casefile_search.
Open new leads with casefile_add as hypothesis or investigating.
Promote cases with casefile_update only after materially new evidence, proof, impact, blockers, remediation, or status changes.
Mark confirmed only when evidence and a PoC or repro are recorded.
Use casefile_link and casefile_unlink for exploit chains. Do not edit linked case IDs directly.
Use casefile_report only for confirmed or already reported cases.
Use killed for disproven, duplicate, or dead-end leads, and include evidence, blockers, next step, or assumptions explaining why.

Tool Map

casefile_add: create a new case.
casefile_update: update an existing case.
casefile_get: read one case by ID.
casefile_list: list cases with filters and pagination.
casefile_search: search all fields or a scoped field such as evidence, impact, or poc.
casefile_link: bidirectionally link two cases.
casefile_unlink: remove a bidirectional case link.
casefile_report: write a markdown report for a confirmed or reported case.

Storage

The Codex plugin uses project-scoped storage by default at .casefile/casefile.jsonl. Use CASEFILE_PATH to force a specific ledger path or CASEFILE_SCOPE=global to use ~/.casefile/casefile.jsonl.

Legacy pi environment variables remain supported for the pi extension.

Signals

GitHub stars: 1k
Forks: 316
Last commit: Oct 2026

Advanced

Item type: skill
Key: casefile
Source: github.com/hashgraph-online/awesome-codex-plugins

github.com/hashgraph-online/awesome-codex-plugins