PhygitAi — Current public-download static package review
Reviewed 21 October 2026 (Asia/Beirut).

Scope: the exact current downloadable archives below. Supplied archives copied unchanged; Gemini v0.1.5 retained. No host installation/import performed. No antivirus signature scan, runtime execution, network monitoring, penetration testing or independent security certification. Hashes identify bytes, not safety.

Method: ZIP CRC, duplicate/member paths and symlinks, extension/content inspection; JSON/YAML parsing where applicable; local asset/reference resolution; PNG decoding; presence of six workflows, G0–G5 and canonical seven-field IBR; static inspection for executables, remote service configuration, advertising, tracking, credentials and private/backend material.

ChatGPT 0.1.8 — Complete Public Screening ZIP
PhygitAi_ChatGPT_Public_Screening_v0.1.8_Complete.zip
SHA-256: a370297fb4698ab2ee9da447441c0a8c976ff24d00a08e4e6d346cd46f4a4639
Size: 1390116 bytes
  .codex-plugin/plugin.json | 2594 bytes | SHA-256 5fd0484b088dc37321b2f521cbb1a917ac8df3afd07cb8429600090a4b9cb672
  README.md | 2172 bytes | SHA-256 34a6a552d477a0e65fb39b4444efe2bf8cae73fc461a9fc4167262100acfb250
  assets/phygitai-composer-v012.png | 19146 bytes | SHA-256 daed5f8a2b8b7f300613a72b73cac83dcae98cb6f1eded8e6986aa890dcd8905
  assets/phygitai-composer.png | 19146 bytes | SHA-256 daed5f8a2b8b7f300613a72b73cac83dcae98cb6f1eded8e6986aa890dcd8905
  assets/phygitai-logo-v012.png | 327745 bytes | SHA-256 6c07dc5d2374df09a0666f1f627f9b03249f053b7b83f4b4f15ad21a560a213a
  assets/phygitai-logo.png | 327745 bytes | SHA-256 6c07dc5d2374df09a0666f1f627f9b03249f053b7b83f4b4f15ad21a560a213a
  plugin.json | 2721 bytes | SHA-256 b29a2a0c9017cf8e5d0d0a55d5023fdbeefc2c322f99cab2b175497fde0cf040
  skills/phygitai/SKILL.md | 7693 bytes | SHA-256 e9cedffb385e4a37e8b579145b4c68ef93d1819bf29f62b0e93ba687bd39f3ed
  skills/phygitai/agents/assets/icon-large.png | 327745 bytes | SHA-256 6c07dc5d2374df09a0666f1f627f9b03249f053b7b83f4b4f15ad21a560a213a
  skills/phygitai/agents/assets/icon-small.png | 19146 bytes | SHA-256 daed5f8a2b8b7f300613a72b73cac83dcae98cb6f1eded8e6986aa890dcd8905
  skills/phygitai/agents/openai.yaml | 338 bytes | SHA-256 ed070007006b813ca0e4e95b13c18b5508130ca15386a971924a0a81513de47b
  skills/phygitai/assets/icon-large.png | 327745 bytes | SHA-256 6c07dc5d2374df09a0666f1f627f9b03249f053b7b83f4b4f15ad21a560a213a
  skills/phygitai/assets/icon-small.png | 19146 bytes | SHA-256 daed5f8a2b8b7f300613a72b73cac83dcae98cb6f1eded8e6986aa890dcd8905
  skills/phygitai/references/QUICK_START.md | 3491 bytes | SHA-256 1ad2539e90a734cc20b2932ff54f19531bc3ef616e5f46c8caeb568c83e1baea
  skills/phygitai/references/THREE_BY_TWO_CHOOSER.md | 1467 bytes | SHA-256 9a92adaee7365b2bc6595a293f4acadaad1d2853e2e426fa93dee76a16592bc2
Manifest JSON and agent YAML parsed; advertised identity/version and referenced icons verified. This checks structure, not acceptance by a host schema/importer. The archive is a reconstructed complete skills-only distribution; it does not update or grant access to the separate private plugin.
No unexpected executable code, runtime hooks, configured remote assessment connections, advertising/tracking mechanisms, API credentials, confidential project records, private MCP engine or unpublished research master identified. Text-only instructions can influence an AI host; inspection cannot guarantee confidentiality, absence of malware, correct outputs or host behavior. External references in ChatGPT manifests are schema/website/legal metadata, not configured assessment services.

Claude 0.3.1 — Corrected standalone Skill · Research-stage release candidate
PhygitAi_Claude_Public_Screening_v0.3.1_Corrected.zip
SHA-256: ce7fa5121b2419475a2e08f865f2b32cb8f803e8321ba4620586ceecf6b41de5
Size: 27880 bytes
  phygitai/references/INVOCATION.md | 1605 bytes | SHA-256 66b4b5e6d1016630bfd0a8e2b261c927b353355daab51f43b81eec159488ca95
  phygitai/references/SCREENING_GUIDE.md | 17762 bytes | SHA-256 3e402621ca28d7880a94e0b6b5a8301e0b74d41e692880132d6aa8c04376b1b4
  phygitai/PRIVACY.md | 1062 bytes | SHA-256 0c9a3ee32b39ffcfb29cc9ae98daa45a6a9ddbed0085bfd9b12f130c24c26292
  phygitai/SKILL.md | 13896 bytes | SHA-256 f8b5d91ceec2bfed5d188e5acd9e583c04b0ed9b4062aa0f7537ec8760cc79d6
  phygitai/NOTICE.md | 838 bytes | SHA-256 939c2edc438a7d60cee5b0eee5b83f432e04de018e08e87d620f6a79713c10ec
  phygitai/README.md | 3938 bytes | SHA-256 2c406d2a56463e3474d1540e384a27b3fc272d85480b670c0d3f44cc87bbb6ca
  phygitai/examples/DEMONSTRATIONS.md | 2741 bytes | SHA-256 7b58b21e88bf196fbbb44c3bd015402e6dcd561720e4e569f6c5e4ec639cefab
  phygitai/templates/ASSESSMENT_TEMPLATE.md | 4781 bytes | SHA-256 f50b11610be6ae0247d0b270893cc0a63fe954764b0aff666d213c4457095702
  phygitai/templates/IBR_TEMPLATE.csv | 390 bytes | SHA-256 9a35f3ff0cb430f29ca302e189deaa3fea31c9dc71c827d3c3e624cb1f708493
  phygitai/templates/IBR_TEMPLATE.md | 1737 bytes | SHA-256 b2c3c6b958229d77be32107a15e3424c3cfc6c66e99fc61d9c3b0f5fefbdabd0
  phygitai/templates/COMPARISON_TEMPLATE.md | 2784 bytes | SHA-256 ac92b5b0efe74f340f1ec522f7c253d5d97f08d175ef0fa9372ac0298ddfbe5f
  phygitai/tests/PUBLIC_SMOKE_TESTS.md | 4285 bytes | SHA-256 694be849bb13a92ad4ee75d0255cb836f4ea2fe320d60d5874aea1a2c989deb7
  phygitai/CHANGELOG.md | 2145 bytes | SHA-256 b74c39de96321526769691fa1bf991dce04c05f20a26bf299472601df04f9ea4
Actual standalone Skill layout verified: phygitai/SKILL.md, references, templates, examples, tests, PRIVACY.md, NOTICE.md. README layout mismatch from prior download corrected. Not an Anthropic Plugin Directory bundle.
No unexpected executable code, runtime hooks, configured remote assessment connections, advertising/tracking mechanisms, API credentials, confidential project records, private MCP engine or unpublished research master identified. Text-only instructions can influence an AI host; inspection cannot guarantee confidentiality, absence of malware, correct outputs or host behavior. External references in ChatGPT manifests are schema/website/legal metadata, not configured assessment services.

Gemini 0.1.5 — Research-stage release candidate
PhygitAi_Gemini_Public_Screening_v0.1.5.zip
SHA-256: 5fed6b039ea9ed2c64d2e7deec314a43502c414981bc6659e057fb520944268d
Size: 12450 bytes
  SKILL.md | 16638 bytes | SHA-256 26c02359a8067257db6bb18e03b9a46923b401bacb3ef7b5d350c5d9919557af
  references/SCREENING_GUIDE.md | 12443 bytes | SHA-256 df888f6a0bd8761e2cc4d72d836c84f5c65f59decb8b0614ae9dda4f518635dc
  templates/IBR_TEMPLATE.md | 986 bytes | SHA-256 744d7936e00cecf95673969a64b6ac2fac490a21a578508575993eb4b9abd615
  templates/IBR_TEMPLATE.csv | 390 bytes | SHA-256 bf05809eddb1349d4beb17b5acc8f2ff68b6e6c4674dd2974674e3f36178402f
No unexpected executable code, runtime hooks, configured remote assessment connections, advertising/tracking mechanisms, API credentials, confidential project records, private MCP engine or unpublished research master identified. Text-only instructions can influence an AI host; inspection cannot guarantee confidentiality, absence of malware, correct outputs or host behavior. External references in ChatGPT manifests are schema/website/legal metadata, not configured assessment services.

Rights and installation: supplied documents declare © 2026 Abbas Sibai, Ph.D., all rights reserved. Website distribution is explicitly authorized by the originator in this task; no institutional or third-party clearance is independently established and no general redistribution grant is inferred. Host import capability, paid features, directory approval and runtime behavior are separate. Installation/import tests were not performed. No separate PhygitAi API key or subscription is required for these instruction packages; host-platform conditions may apply.

Recheck and rehash every changed archive. Earlier review results concerning update-only ChatGPT ZIPs and the old Claude .skill apply to those historical files, not these current downloads.