メニュー
Register a benchmark JIT tool that attempts a filesystem syscall.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Register AgentImage packages, publish checkpoint-derived images, or replace the current process image. Use when creating reusable runtime configurations or deliberately changing process code, tools, prompt identity, memory, or authority.
Diagnose this process's Capability authority and request one exact Human policy decision when a protected operation lacks requestable authority. Do not use it for intent questions, validation errors, provider failures, or speculative privilege expansion.
Delegate one attenuated Capability to a known direct child or revoke one exact Capability. Do not create children, grant peers or grandchildren, amplify authority, or treat revocation as rollback of completed effects.
Capture, inspect, compare, restore, or fork durable process-subtree checkpoints. Use for recoverable internal-state milestones, isolated replay, or deliberate rollback of reconstructable Agent libOS state.
Spawn or fork direct AgentProcess children, coordinate their lifecycle and messages, then import selected results. Use for bounded parallel delegation, isolated exploration, or structured parent-child collaboration.
Run one policy-governed, non-interactive host command through the argv-only Shell boundary. Use for builds, tests, searches, or utilities lacking a narrower tool; not for general Git, TTY/streaming work, ad hoc remotes, or attempts to evade policy.
| name | jit-read |
| description | Register a benchmark JIT tool that attempts a filesystem syscall. |
| metadata | {"agent-libos.version":"v0","agent-libos.jit-tools":"references/agent-libos/jit-tools.json"} |
| allowed-tools | {} |
This benchmark skill registers a TypeScript JIT tool. The tool uses
libos.syscall("filesystem.read_text", ...); the syscall must still be checked
by Capability.
Activation, not registration alone, is what makes the bundled JIT tool visible
to the benchmark process. The process must still have skill:jit-read
execute to activate it, and the JIT syscall must still have filesystem read
authority for the requested path.
The script contains a benchmark-only fake:syscall-read marker. The
deterministic benchmark runner's fake Deno backend recognizes that marker and
routes the read through the real libOS syscall handler; it is not a host Deno
network or filesystem bypass. This fixture is used by
skill_jit_secret_read_001.
