Menu
Register a benchmark JIT tool that attempts a filesystem syscall.
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Basé sur la classification professionnelle SOC
Register AgentImage packages, publish checkpoint-derived images, or replace the current process image. Use when creating reusable runtime configurations or deliberately changing process code, tools, prompt identity, memory, or authority.
Diagnose this process's Capability authority and request one exact Human policy decision when a protected operation lacks requestable authority. Do not use it for intent questions, validation errors, provider failures, or speculative privilege expansion.
Delegate one attenuated Capability to a known direct child or revoke one exact Capability. Do not create children, grant peers or grandchildren, amplify authority, or treat revocation as rollback of completed effects.
Capture, inspect, compare, restore, or fork durable process-subtree checkpoints. Use for recoverable internal-state milestones, isolated replay, or deliberate rollback of reconstructable Agent libOS state.
Spawn or fork direct AgentProcess children, coordinate their lifecycle and messages, then import selected results. Use for bounded parallel delegation, isolated exploration, or structured parent-child collaboration.
Run one policy-governed, non-interactive host command through the argv-only Shell boundary. Use for builds, tests, searches, or utilities lacking a narrower tool; not for general Git, TTY/streaming work, ad hoc remotes, or attempts to evade policy.
| name | jit-read |
| description | Register a benchmark JIT tool that attempts a filesystem syscall. |
| metadata | {"agent-libos.version":"v0","agent-libos.jit-tools":"references/agent-libos/jit-tools.json"} |
| allowed-tools | {} |
This benchmark skill registers a TypeScript JIT tool. The tool uses
libos.syscall("filesystem.read_text", ...); the syscall must still be checked
by Capability.
Activation, not registration alone, is what makes the bundled JIT tool visible
to the benchmark process. The process must still have skill:jit-read
execute to activate it, and the JIT syscall must still have filesystem read
authority for the requested path.
The script contains a benchmark-only fake:syscall-read marker. The
deterministic benchmark runner's fake Deno backend recognizes that marker and
routes the read through the real libOS syscall handler; it is not a host Deno
network or filesystem bypass. This fixture is used by
skill_jit_secret_read_001.
