How do I install Casefile?

Install Casefile in your harness: Codex — codex plugin marketplace add x4cc3/casefile; Any agent — npx skills@1.7.4 add x4cc3/casefile. Full step-by-step guidance is on the HOL plugin page.

How do I install Casefile in Codex?

To install Casefile in Codex, start with codex plugin marketplace add x4cc3/casefile. The complete step-by-step install guide for Codex is on the HOL plugin page.

Pricing for Casefile is published on its HOL plugin page when the maker schedules a launch.

How is the Trust Score for Casefile computed?

Casefile has a HOL Trust Score of 75 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/x4cc3%2Fcasefile/trust

Who publishes Casefile?

Casefile is published by x4cc3 and listed on HOL.

Is Casefile available now?

Casefile availability is listed on its HOL plugin page.

Casefile

x4cc3/casefile · v1.3.7 · Development & Workflow

by x4cc3review

Persistent security case tracking for bug bounties, CTFs, and security audits.

Install Source Claim this pluginFollow0

Trust Score75 Security83 Surfaces2

Is Casefile a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

Codex

1 skill
1 MCP server

Before you install

Sign-in: Asks you to sign in when you install it
Declared access: Read, Write
License: MIT

Check before relying on it

Security checks that did not finish: cisco-skill-scanner, codex-plugin-scanner. See the evidence
1 medium finding from the scan. See the evidence
The publisher has not verified ownership on HOL.

What is Casefile?

Casefile is a published development & workflow plugin for AI coding agents in the codex ecosystem, developed by x4cc3 and distributed through the HOL AI plugin registry. Persistent security case tracking for bug bounties, CTFs, and security audits.

Canonical slug: x4cc3/casefile
Version: v1.3.7 · updated Sep 20, 2026
Open data: entity.json (JSON-LD)

Trust & Reputation

HOL Trust Score

Factor Analysis

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability

100pts

Maintenance

55pts

MCP Posture

100pts

Plugin Security

83pts

Provenance

35pts

Publisher Quality

75pts

Registry Snapshot

Project link: Casefile
Repository: https://github.com/x4cc3/casefile
Homepage: https://github.com/x4cc3/casefile
Canonical profile: https://hol.org/registry/plugins/x4cc3%2Fcasefile
Publisher verification: No
Marketplace source: Unknown
Scanner: Broker fallback
Security result: Needs review
Digest verified: Yes

1 bundled skill — copy or download SKILL.mdOpen skills

Trust & reputation

Trust & Reputation

HOL Trust Score

Factor Analysis

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability

100pts

Maintenance

55pts

MCP Posture

100pts

Plugin Security

83pts

Provenance

35pts

Publisher Quality

75pts

Provenance

Plugin root: .
Source repo: https://github.com/x4cc3/casefile
Source commit: Unpinned
Publisher verified: No
Owner verified: Not owner verified

Continuous scanner CI detected

No action is required. This plugin receives the full trust score.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security Posture

See how the Trust Score is computed

Needs review

Security result

Security score

High findings

Provider: registry-broker-fallback
Grade: B · review
Version: Unknown

cisco-skill-scanner: unknown

Findings

lowoperational-securitysupply-chain.lockfile-missing

Repository snapshot does not include a lockfile.

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

mediumprovenanceprovenance.commit.missing

An immutable source commit is required for provenance.

Casefile — Frequently asked questions

What is Casefile?: Casefile is an AI plugin in the HOL registry. Persistent security case tracking for bug bounties, CTFs, and security audits.
How do I install Casefile?: Install Casefile in your harness: Codex — codex plugin marketplace add x4cc3/casefile; Any agent — npx [email protected] add x4cc3/casefile. Full step-by-step guidance is on the HOL plugin page.
How do I install Casefile in Codex?: To install Casefile in Codex, start with codex plugin marketplace add x4cc3/casefile. The complete step-by-step install guide for Codex is on the HOL plugin page.
Is Casefile free?: Pricing for Casefile is published on its HOL plugin page when the maker schedules a launch.
How is the Trust Score for Casefile computed?: Casefile has a HOL Trust Score of 75 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/x4cc3%2Fcasefile/trust
Who publishes Casefile?: Casefile is published by x4cc3 and listed on HOL.
Is Casefile available now?: Casefile availability is listed on its HOL plugin page.

Install Guidance

Install in Codex

Install through the Codex CLI plugin marketplace.

Codex plugin docs

Optional: install HOL Guard for Codex first, so it can check this plugin's tools on your machine before Codex uses them.

1
Register the marketplace
Run in any terminal. Codex reads the marketplace entry from .agents/plugins/marketplace.json (or the legacy .claude-plugin path) in the repository. If the repository ships none, add the generated entry from the Advanced section below first.
shell
2
Install from the Plugins browser
Open Codex, open the Plugins browser, choose the marketplace registered by the previous command, and install casefile.
3
Check the marketplace is registered
This confirms the marketplace source only. Confirm the plugin itself is enabled in the Plugins browser before relying on it.
shell

Did setup work in Codex?

No setup reports for Codex yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin Manifest

{
  "name": "casefile",
  "version": "1.3.7",
  "description": "Persistent security case tracking for Codex and pi.",
  "author": {
    "name": "x4cc3"
  },
  "homepage": "https://github.com/x4cc3/casefile",
  "repository": "https://github.com/x4cc3/casefile",
  "license": "MIT",
  "keywords": [
    "casefile",
    "security",
    "bug-bounty",
    "ctf",
    "audit",
    "mcp"
  ],
  "skills": "./",
  "mcpServers": "./.registry/mcp.json",
  "interface": {
    "displayName": "Casefile",
    "developerName": "x4cc3",
    "shortDescription": "Track security cases, evidence, chains, and reports.",
    "longDescription": "Casefile adds durable security case tracking to Codex with a shared ledger for hypotheses, evidence, exploit chains, dead ends, and markdown reports.",
    "category": "Developer Tools",
    "capabilities": [
      "Read",
      "Write"
    ],
    "defaultPrompt": [
      "Track this security investigation in Casefile."
    ],
    "composerIcon": "./assets/icon.svg",
    "logo": "./assets/logo.png",
    "screenshots": [
      "./assets/screenshot.png"
    ],
    "websiteURL": "https://github.com/x4cc3/casefile",
    "privacyPolicyURL": "https://github.com/x4cc3/casefile#privacy-policy",
    "termsOfServiceURL": "https://github.com/x4cc3/casefile#terms-of-service",
    "brandColor": "#1F6FEB"
  },
  "registryIndexVersion": 5
}

Marketplace Source

Repo URL: https://github.com/x4cc3/casefile
Marketplace path: Unknown
Source path: plugins/x4cc3/casefile
Install policy: AVAILABLE

Skills

1 SKILL.md file ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

skills-cli

casefile
skills/casefile/SKILL.md
Use when tracking security investigations, bug bounty findings, CTF leads, audit evidence, exploit chains, dead ends, or reports in the Casefile ledger through Codex.
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File Inventory

.codex-plugin/plugin.json

plugin-manifest

1,140 bytes

8e2c36af1bfedaf1…

.mcp.json

file

569 bytes

6c25f62481cd075e…

.registry/mcp.json

mcp-config

361 bytes

a13431140b3a0bd8…

assets/icon.svg

asset

387 bytes

1fb6bc3d89522f61…

assets/logo.png

asset

344,228 bytes

d494ab773a811f84…

assets/screenshot.png

asset

344,228 bytes

d494ab773a811f84…

package.json

file

1,191 bytes

7096603895ff6ecd…

README.md

file

2,513 bytes

f6c7af933bce2501…

skills/casefile/SKILL.md

skill

1,843 bytes

e6138730f8ade0ca…

tsconfig.json

file

332 bytes

5c320be580796e67…

History, reviews, and alternatives

Launch history

No public launch record yet.

User reviews

—from 0 reviews

The first substantive review can be added on this page.

Milestones and alternatives

Related alternatives

abhigyan-shekhar/waggle dmytro-sherstobitov/rekall frumu-ai/tandem-codex-plugin valkyr-labs-inc/graymatter cloudguo123/atomlane codex-goal-progress-contributors/codex-goal-progress

Suggested from HOL scan evidence: same category, at least one shared runtime, similar tags and contents. Paid placement and Trust Score play no part.

Product

AI tools

Extensions

Resources

AI Agents

Plugins

Extensions

Best Plugins

Security

Open Source

Points

Events

Standards

Tools

Library Docs

Resources

Is Casefile a fit?

Works with

Before you install

Check before relying on it

What is Casefile?

Trust & Reputation

Factor Analysis

Registry Snapshot

Trust & reputation

Trust & Reputation

Factor Analysis

Provenance

Security Posture

Findings

Casefile — Frequently asked questions

Install Guidance

Install in Codex

Did setup work in Codex?

Plugin Manifest

Marketplace Source

Skills

File Inventory

Related plugins

Alternatives in Development & Workflow

History, reviews, and alternatives

Launch history

User reviews

Milestones and alternatives