I wonder how long it will take for someone to pwn this?
To be fair, Leetcode/Hackerrank also runs arbitrary code.
TREX: An AI code reviewer that runs your code
11–14 of 14 posts
Re: TREX: An AI code reviewer that runs your code
#12We've found that methods like this substantially increase the quality and reliability of coding agent output. The ability to run code in a sandbox, drive an interactive session using a browser or API calls or other apps, and visually confirm output via vision models all adds up to plugging a big hole in the feedback loop for agent modifying a complex codebase. We've had agents go as far as interactively testing how o…
Didn't Claude Fable do this? (and I think codex and Claude Code in general)
When Fable was around last week, I was smitten with it. I took an executable file from an old DOS application, told it to port it to the Mac. From that single prompt, it was able to set up a test rig with Dosbox to execute the application after already disassembling and gathering as much info as it can and then continuously refine the output application while testing it against the original file. 15 minutes later it had an 99% identical looking and functioning application running natively on the Mac. Sone final refinements got that to 100%.
Re: TREX: An AI code reviewer that runs your code
#13[flagged]
Re: TREX: An AI code reviewer that runs your code
#14I wonder how long it will take for someone to pwn this?
To be fair, Leetcode/Hackerrank also runs arbitrary code.
Comparing it to Leetcode is completely off. On Leetcode, you're running an isolated algorithm that doesn't need any access to internal repos or staging environments. But a CI/CD sandbox that reviews PRs by definition has to have serious permissions, or it won't be able to build anything.