← Back to Skills Marketplace
maxsonderby

case.dev

by max · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
423
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install casedev
Description
case.dev — a legal AI platform with encrypted document vaults, OCR, audio transcription, and legal search. This skill installs the casedev CLI and provides s...
README (SKILL.md)

case.dev

case.dev is a legal AI platform. This skill bundle covers the CLI and all platform capabilities.

Sub-skills

Sub-skill What it does
setup/ Install CLI, authenticate, diagnostics, API routes
vaults/ Encrypted document vaults — create, upload, download, semantic search
ocr/ Document OCR — PDF/image text extraction with word-level positioning
transcription/ Audio/video transcription with speaker diarization
search/ Web, legal, case law, patent, and vault search

Start with setup/ to install and authenticate, then use the others as needed.

Quick start

# Install
brew install casemark/casedev/casedev

# Or via shell script
curl -fsSL https://raw.githubusercontent.com/CaseMark/homebrew-casedev/main/install.sh | sh

# Authenticate
export CASE_API_KEY=sk_case_YOUR_KEY
# or
casedev auth login

Then read the sub-skill for the task at hand.

Usage Guidance
This skill appears to be a coherent set of instructions for using the third-party casedev CLI. Before installing or providing credentials: 1) Verify the CLI source — check the Homebrew tap and the GitHub repo/install script contents (do not run curl | sh unless you inspected it). 2) Prefer installing from a vetted package manager (Homebrew) and review the formula/repo. 3) Protect your CASE_API_KEY: don't paste it into chat; use a scoped key if available and set it as an env var or CLI config. 4) Be cautious with uploads — files you upload to the service (vaults) will be transmitted to case.dev. 5) Avoid using --api-url or --no-auth pointing to unknown endpoints unless you trust them. If you need higher assurance, ask the publisher for a homepage/repo and review the installer and CLI code before use.
Capability Analysis
Type: OpenClaw Skill Name: casedev Version: 1.0.0 The skill is classified as suspicious due to several high-risk capabilities exposed to the AI agent, creating significant prompt injection vulnerabilities. The `setup/SKILL.md` file documents the `curl -fsSL ... | sh` installation method, which is a supply chain risk allowing arbitrary code execution if the remote script is compromised. More critically, `setup/SKILL.md` exposes `casedev api` for raw API access and the `--api-url` global flag, enabling the agent to make arbitrary HTTP requests to any external endpoint. This capability, combined with local file upload features in `vaults/SKILL.md`, could be abused by a prompt-injected agent for data exfiltration or unauthorized network access, even though the skill itself does not explicitly instruct such malicious behavior.
Capability Assessment
Purpose & Capability
The name/description claim a CLI for case.dev plus sub-skills (OCR, vaults, transcription, search). The SKILL.md exclusively documents using the casedev CLI and related workflows (install, auth, upload, search, transcribe), which is coherent with the stated purpose.
Instruction Scope
Instructions tell the agent to run casedev CLI commands and to upload local files to vaults, check job status, and call raw API routes. These are within the expected scope. Notable points: the docs expose a raw API access mode (--api-url, --api-key, --no-auth) which allows pointing requests at arbitrary endpoints if the user supplies them, and workflows require uploading local files (expected for vaults/OCR/transcription). The SKILL.md mentions the config path (~/.config/case/config.json) and env var CASE_API_KEY but does not instruct reading unrelated system files.
Install Mechanism
The package has no install spec (instruction-only). The docs recommend two common install paths: a Homebrew formula (casemark/casedev/casedev) and a GitHub raw curl | sh installer. Recommending curl | sh is a high-risk install pattern in general — it's an instruction to the user, not executed by the skill — so verify the Homebrew tap and review any install script before running it.
Credentials
The skill itself declares no required env vars, but the docs correctly instruct users/agents to provide a CASE_API_KEY for the service (sk_case_... prefix). Requesting a single API key for service access is proportionate. No unrelated credentials or broad system secrets are requested.
Persistence & Privilege
The skill is instruction-only, has no install mechanism performed by the platform, and does not request permanent inclusion (always:false). It references the CLI's local config path for storing an API key, but it does not instruct modifying other skills or system-wide settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install casedev
  3. After installation, invoke the skill by name or use /casedev
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial publish
Metadata
Slug casedev
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is case.dev?

case.dev — a legal AI platform with encrypted document vaults, OCR, audio transcription, and legal search. This skill installs the casedev CLI and provides s... It is an AI Agent Skill for Claude Code / OpenClaw, with 423 downloads so far.

How do I install case.dev?

Run "/install casedev" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is case.dev free?

Yes, case.dev is completely free (open-source). You can download, install and use it at no cost.

Which platforms does case.dev support?

case.dev is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created case.dev?

It is built and maintained by max (@maxsonderby); the current version is v1.0.0.

💬 Comments