Inspiration
In 2026 alone, Coinbase (twice), Kraken, Ledger, Trezor and SafePal disclosed customer data exposures, and 1.5 million Binance user records were offered for sale. Every crypto user with KYC on several platforms faces the same question after each headline: what did I actually give them? Nobody can answer it, and the evidence (ID scans, selfies, signup emails, seed phrase screenshots) is usually sitting forgotten in their own files.
What it does
Anika (Swahili for laying something out in the open) builds a private exposure record from files on your UGREEN NAS: Map my exposure: which exchanges and apps hold your ID, selfie, address and contact details, with the proof file and a confidence level for each. Platform X was breached: what X likely holds about you, ranked fixes, and data request letter drafts. Lock it down: after you approve the exact list, exposed files move into a hidden vault that you encrypt with UGOS folder encryption. Every move is verified and a restore list is saved. Weekly check: flags only new sensitive files. Anika never holds keys, never moves funds, never deletes, never sends anything, and reports file locations, never secret values.
How we built it
Anika is a Uliya Skill: a SKILL.md plus four reference files. The parent Skill only delegates, sending 16 self-contained instructions to four NAS expert agents (file, photo, document and knowledge) across five CLIs. Reads need no approval; creating the vault, moving files and saving the record go through owner consent plus gateway or workflow approval. All models run locally on the NAS.
Challenges we ran into
- The catalog has no encryption action, so Anika asks the owner to turn on UGOS folder encryption before anything moves and never claims to encrypt anything itself.
- Files on the NAS are untrusted input: a planted note could try to order files moved to a public folder. Anika treats file content as data, never as instructions.
- Telling a real private key from a transaction hash, which looks the same. 4.Fitting strict delegation rules: one-line commands and every result state handled
Accomplishments that we're proud of
The package passes the official Uliya Skill Kit 0.7.3 checker with 0 errors and 0 warnings, and handles all five delegation states (completed, failed, cancelled, waiting for user, waiting for approval).
What we learned
UGOS Pro folder encryption (1.18.1.0098+) covers top-level shared and user folders only, and snapshots can keep readable copies. Our containment step and its warnings were designed around that.
What's next for Anika
Testing on real UGREEN hardware with synthetic data: expert output quality, labeling accuracy, approval prompts and pointer-only compliance. Then tuning detection, and more letter templates for data requests by region.
Built With
- claude
- document-agent
- file-agent
- knowledge-agent
- markdown
- photo-agent
- ugos-pro
- ugreen-ai-nas
- uliya-skill
Log in or sign up for Devpost to join the conversation.