AGENT_INTEGRATION.md
ARCHITECTURE.md
CAPABILITIES.md
CHANGELOG.md
CONTRIBUTING.md
LICENSE
MANIFEST.in
PUBLISHING.md
README.md
README.zh-CN.md
RELEASE_NOTES_3.1.md
SAFETY.md
SECURITY.md
pyproject.toml
examples/agent_tool_manifest.json
examples/params-apk.json
examples/params-server-offline.json
src/dftk/SKILL.md
src/dftk/__init__.py
src/dftk/__main__.py
src/dftk/catalog.py
src/dftk/cli.py
src/dftk/doctor.py
src/dftk/mcp_server.py
src/dftk/mcp_worker.py
src/dftk/skill_bundle.py
src/dftk.egg-info/PKG-INFO
src/dftk.egg-info/SOURCES.txt
src/dftk.egg-info/dependency_links.txt
src/dftk.egg-info/entry_points.txt
src/dftk.egg-info/requires.txt
src/dftk.egg-info/top_level.txt
src/dftk/core/aggregate.py
src/dftk/core/case.py
src/dftk/core/helpers.py
src/dftk/core/models.py
src/dftk/core/registry.py
src/dftk/core/safety.py
src/dftk/core/timeline_core.py
src/dftk/data/bip39_english.txt
src/dftk/primitives/__init__.py
src/dftk/primitives/android.py
src/dftk/primitives/artifact.py
src/dftk/primitives/binary.py
src/dftk/primitives/browser.py
src/dftk/primitives/crypto.py
src/dftk/primitives/database.py
src/dftk/primitives/e01.py
src/dftk/primitives/email_auth.py
src/dftk/primitives/files.py
src/dftk/primitives/linux.py
src/dftk/primitives/network.py
src/dftk/primitives/server.py
src/dftk/primitives/timeline.py
src/dftk/primitives/windows.py
src/dftk/recipes/__init__.py
src/dftk/recipes/builtin.py
src/dftk/skill/CHANGELOG.md
src/dftk/skill/LICENSE
src/dftk/skill/README.md
src/dftk/skill/README_CN.md
src/dftk/skill/RELEASE_NOTES.md
src/dftk/skill/SKILL.md
src/dftk/skill/examples/apk-investigation.md
src/dftk/skill/examples/database-relationship.md
src/dftk/skill/examples/pcap-investigation.md
src/dftk/skill/examples/server-investigation.md
src/dftk/skill/references/claim-patterns.md
src/dftk/skill/references/correlation.md
src/dftk/skill/references/direct-cli.md
src/dftk/skill/references/evidence-model.md
src/dftk/skill/references/investigation.md
src/dftk/skill/references/negative-findings.md
src/dftk/skill/references/reporting.md
src/dftk/skill/references/tool-selection.md
src/dftk/skill/references/verification.md
src/dftk/skill/references/domains/android.md
src/dftk/skill/references/domains/artifact.md
src/dftk/skill/references/domains/browser.md
src/dftk/skill/references/domains/database.md
src/dftk/skill/references/domains/disk.md
src/dftk/skill/references/domains/email.md
src/dftk/skill/references/domains/linux.md
src/dftk/skill/references/domains/mobile.md
src/dftk/skill/references/domains/network.md
src/dftk/skill/references/domains/timeline.md
src/dftk/skill/references/domains/web.md
src/dftk/skill/references/domains/windows.md
src/dftk/skill/templates/answer-card.md
src/dftk/skill/templates/case-report.md
src/dftk/skill/templates/finding.md
tests/test_android_appdata.py
tests/test_android_extended.py
tests/test_archive.py
tests/test_artifact_extended.py
tests/test_binary_extended.py
tests/test_bip39.py
tests/test_browser.py
tests/test_case.py
tests/test_case_concurrency.py
tests/test_cli_public.py
tests/test_core.py
tests/test_crypto_extended.py
tests/test_database.py
tests/test_database_extended.py
tests/test_dex.py
tests/test_email.py
tests/test_email_mime.py
tests/test_generalization.py
tests/test_linux.py
tests/test_mcp_native.py
tests/test_network.py
tests/test_network_extended.py
tests/test_optional_forensic_dependencies.py
tests/test_public_api.py
tests/test_skill_bundle_31.py
tests/test_timeline.py
tests/test_web_config_extract.py