ClawHub
Back to skill

Security audit

Jane Street Puzzle Archivist

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Jane Street puzzle-archive workflow with no evidence of hidden installs, credential access, exfiltration, or unsafe persistence.

Before installing, confirm you trust the repository where this will run and review the referenced local scripts, especially the current-puzzle and reference-index scripts. Expect the skill to create or update puzzle folders, solver scripts, notes, README entries, submission metadata, and possibly shared archive knowledge files.

SkillSpector

Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Self-Modification

High
Category
Rogue Agent
Content
- `references/solving-patterns.md`
5. Solve the puzzle with a reproducible script stored in the month folder.
6. Record the answer and submission status in that month's `README.md` and `submission.json`.
7. If you learned a reusable technique, update this skill or the repo knowledge files before finishing.

## Required structure
Confidence
85% confidence
Finding
Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.

Static analysis

No suspicious patterns detected.