--- title: How we use /goal to find bugs in Patch the Planet description: Trail of Bits shares three techniques their engineers developed for using Codex's /goal feature during the Patch the Planet bug-hunting initiative. Key... canonical: https://daily.dev/posts/how-we-use-goal-to-find-bugs-in-patch-the-planet-8ffhyp7zf twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: How we use /goal to find bugs in Patch the Planet | daily.dev og:description: Trail of Bits shares three techniques their engineers developed for using Codex's /goal feature during the Patch the Planet bug-hunting initiative. Key... og:url: https://daily.dev/posts/how-we-use-goal-to-find-bugs-in-patch-the-planet-8ffhyp7zf og:image: https://api.daily.dev/og/posts/8FfhYP7zF.png og:image:alt: How we use /goal to find bugs in Patch the Planet og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # How we use /goal to find bugs in Patch the Planet **[Trail of Bits Blog](https://daily.dev/sources/trail-of-bits)** · 8 min read · 0 upvotes · 0 comments ## Summary Trail of Bits shares three techniques their engineers developed for using Codex's /goal feature during the Patch the Planet bug-hunting initiative. Key findings include: letting Codex write its own goal prompts (using threat model files as input), defining outcomes rather than prescribing methods, and assigning one outcome per agent to avoid competing optimization targets. The post details a variant-analysis pipeline for the Rust compiler that found every Rust bug submitted, a CVE-to-Semgrep-rule conversion workflow that flagged 11 variant hits, and discovery of two potential privilege-escalation bugs in Keycloak's SAML component. The post emphasizes that human expert judgment remains essential for scoping, validating findings, and knowing what constitutes a reportable vulnerability. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Your AI agent fixed the bug, but what else did it change?](https://daily.dev/posts/your-ai-agent-fixed-the-bug-but-what-else-did-it-change--inujowq00) · Trail of Bits Blog · 0 upvotes · 0 comments - [Just a rumour of a bug is enough to find a security exploit these days](https://daily.dev/posts/just-a-rumour-of-a-bug-is-enough-to-find-a-security-exploit-these-days-wzfcjbyf0) · Lobsters · 1 upvotes · 0 comments - [OpenAI launches new initiative to help find and patch open-source bugs](https://daily.dev/posts/openai-launches-new-initiative-to-help-find-and-patch-open-source-bugs-cuvdbvyxk) · TechCrunch · 0 upvotes · 0 comments - [How bug bounty sharpens one researcher’s security skills](https://daily.dev/posts/how-bug-bounty-sharpens-one-researcher-s-security-skills-oopxull0e) · GitHub Blog · 0 upvotes · 0 comments --- Tags: [#openai-codex](https://daily.dev/tags/openai-codex), [#prompt-engineering](https://daily.dev/tags/prompt-engineering), [#vulnerability](https://daily.dev/tags/vulnerability) [View this post on daily.dev](https://daily.dev/posts/how-we-use-goal-to-find-bugs-in-patch-the-planet-8ffhyp7zf) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"How we use /goal to find bugs in Patch the Planet","url":"https://daily.dev/posts/how-we-use-goal-to-find-bugs-in-patch-the-planet-8ffhyp7zf","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/how-we-use-goal-to-find-bugs-in-patch-the-planet-8ffhyp7zf"},"datePublished":"2026-07-28T11:02:27.428Z","dateModified":"2026-10-15T02:19:54.482Z","description":"Trail of Bits shares three techniques their engineers developed for using Codex's /goal feature during the Patch the Planet bug-hunting initiative. Key...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/1d4e44b7c739c43bb22e679e0424e6d5?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/1d4e44b7c739c43bb22e679e0424e6d5?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Trail of Bits Blog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Trail of Bits Blog","logo":"https://media.daily.dev/image/upload/s--TLbYx4ip--/f_auto,q_auto/v1780213255/logos/trail-of-bits?_a=BAMAMiWQ0","url":"https://daily.dev/sources/trail-of-bits"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/how-we-use-goal-to-find-bugs-in-patch-the-planet-8ffhyp7zf","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"openai-codex,prompt-engineering,vulnerability","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Trail of Bits Blog","item":"https://daily.dev/sources/trail-of-bits"},{"@type":"ListItem","position":3,"name":"How we use /goal to find bugs in Patch the Planet"}]} ```