Public package
Casefile
Deterministic trust intake for agent capabilities.
The problem
Installing an agent skill or plugin means trusting prompts, hooks, scripts, references, and supply-chain material that are rarely reviewed as one artifact.
The system
Casefile inspects supported capability artifacts without executing them, emits reproducible findings and identity, and lets an operator lock an approved state and verify it later.
Try it
npx casefile@latest scan ./path/to/pluginSystem properties
- 01Static analysis only: assessed artifacts are never executed.
- 02Deterministic JSON, text, and SARIF evidence for local or CI review.
- 03Lock and verify workflows detect byte, policy, finding, and tool-version drift.
- 04Strict mode makes incomplete analysis explicit and fail-closed.