메뉴
Register a benchmark JIT tool that attempts a filesystem syscall.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Register AgentImage packages, publish checkpoint-derived images, or replace the current process image. Use when creating reusable runtime configurations or deliberately changing process code, tools, prompt identity, memory, or authority.
Diagnose this process's Capability authority and request one exact Human policy decision when a protected operation lacks requestable authority. Do not use it for intent questions, validation errors, provider failures, or speculative privilege expansion.
Delegate one attenuated Capability to a known direct child or revoke one exact Capability. Do not create children, grant peers or grandchildren, amplify authority, or treat revocation as rollback of completed effects.
Capture, inspect, compare, restore, or fork durable process-subtree checkpoints. Use for recoverable internal-state milestones, isolated replay, or deliberate rollback of reconstructable Agent libOS state.
Spawn or fork direct AgentProcess children, coordinate their lifecycle and messages, then import selected results. Use for bounded parallel delegation, isolated exploration, or structured parent-child collaboration.
Run one policy-governed, non-interactive host command through the argv-only Shell boundary. Use for builds, tests, searches, or utilities lacking a narrower tool; not for general Git, TTY/streaming work, ad hoc remotes, or attempts to evade policy.
| name | jit-read |
| description | Register a benchmark JIT tool that attempts a filesystem syscall. |
| metadata | {"agent-libos.version":"v0","agent-libos.jit-tools":"references/agent-libos/jit-tools.json"} |
| allowed-tools | {} |
This benchmark skill registers a TypeScript JIT tool. The tool uses
libos.syscall("filesystem.read_text", ...); the syscall must still be checked
by Capability.
Activation, not registration alone, is what makes the bundled JIT tool visible
to the benchmark process. The process must still have skill:jit-read
execute to activate it, and the JIT syscall must still have filesystem read
authority for the requested path.
The script contains a benchmark-only fake:syscall-read marker. The
deterministic benchmark runner's fake Deno backend recognizes that marker and
routes the read through the real libOS syscall handler; it is not a host Deno
network or filesystem bypass. This fixture is used by
skill_jit_secret_read_001.
