--- title: How we use /goal to find bugs in Patch the Planet description: Trail of Bits shares three techniques their engineers developed for using Codex's /goal feature during the Patch the Planet bug-hunting initiative. Key... canonical: https://daily.dev/posts/how-we-use-goal-to-find-bugs-in-patch-the-planet-8ffhyp7zf twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: How we use /goal to find bugs in Patch the Planet | daily.dev og:description: Trail of Bits shares three techniques their engineers developed for using Codex's /goal feature during the Patch the Planet bug-hunting initiative. Key... og:url: https://daily.dev/posts/how-we-use-goal-to-find-bugs-in-patch-the-planet-8ffhyp7zf og:image: https://api.daily.dev/og/posts/8FfhYP7zF.png og:image:alt: How we use /goal to find bugs in Patch the Planet og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # How we use /goal to find bugs in Patch the Planet **[Trail of Bits Blog](https://daily.dev/sources/trail-of-bits)** · 8 min read · 0 upvotes · 0 comments ## Summary Trail of Bits shares three techniques their engineers developed for using Codex's /goal feature during the Patch the Planet bug-hunting initiative. Key findings include: letting Codex write its own goal prompts (using threat model files as input), defining outcomes rather than prescribing methods, and assigning one outcome per agent to avoid competing optimization targets. The post details a variant-analysis pipeline for the Rust compiler that found every Rust bug submitted, a CVE-to-Semgrep-rule conversion workflow that flagged 11 variant hits, and discovery of two potential privilege-escalation bugs in Keycloak's SAML component. The post emphasizes that human expert judgment remains essential for scoping, validating findings, and knowing what constitutes a reportable vulnerability. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [A Seasoned Tester's Crystal Ball: Capture the Bugs](https://daily.dev/posts/a-seasoned-tester-s-crystal-ball-capture-the-bugs-zppxnjhud) · A Seasoned Tester's Crystal Ball · 0 upvotes · 0 comments --- Tags: [#vulnerability](https://daily.dev/tags/vulnerability), [#prompt-engineering](https://daily.dev/tags/prompt-engineering), [#codex](https://daily.dev/tags/codex) [View this post on daily.dev](https://daily.dev/posts/how-we-use-goal-to-find-bugs-in-patch-the-planet-8ffhyp7zf) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"How we use /goal to find bugs in Patch the Planet","url":"https://daily.dev/posts/how-we-use-goal-to-find-bugs-in-patch-the-planet-8ffhyp7zf","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/how-we-use-goal-to-find-bugs-in-patch-the-planet-8ffhyp7zf"},"datePublished":"2026-07-28T11:02:27.428Z","dateModified":"2026-07-28T11:02:57.665Z","description":"Trail of Bits shares three techniques their engineers developed for using Codex's /goal feature during the Patch the Planet bug-hunting initiative. Key...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/1d4e44b7c739c43bb22e679e0424e6d5?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/1d4e44b7c739c43bb22e679e0424e6d5?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Trail of Bits Blog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Trail of Bits Blog","logo":"https://media.daily.dev/image/upload/s--TLbYx4ip--/f_auto,q_auto/v1780213255/logos/trail-of-bits?_a=BAMAMiWQ0","url":"https://daily.dev/sources/trail-of-bits"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/how-we-use-goal-to-find-bugs-in-patch-the-planet-8ffhyp7zf","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"vulnerability,prompt-engineering,codex","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Trail of Bits Blog","item":"https://daily.dev/sources/trail-of-bits"},{"@type":"ListItem","position":3,"name":"How we use /goal to find bugs in Patch the Planet"}]} ```