Apache druid security
[COLM'26] SkillLearnBench is the first benchmark for evaluating continual learning methods that automatically generate agent skills.
npx -y skills add cxcscmu/SkillLearnBench --skill apache-druid-securityAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
What its author says it does
Copied from the file, not written here
Security practices and vulnerability patching for Apache Druid, focusing on JavaScript sandbox configuration.
SKILL.md
0.9 KB, 141 tokens by cl100k_base, as published. Nobody here has run it
Apache Druid Security Patching
When patching vulnerabilities related to arbitrary code execution in Druid via JavaScript filters or samplers:
- Identify the vulnerability point: Look for where JavaScript is evaluated (e.g.,
JavaScriptFilter,JavaScriptFunction). - Review sandbox settings: Check how
JavascriptConfigis initialized and enforced. Ensure that enabling JavaScript (enabled: true) is not allowing bypasses via unexpected configurations or null keys. - Impose Restrictions: Modify the logic to strictly require explicit approval for dangerous operations, or block them entirely by default.
- Testing: Create a regression test that mimics the exploit payload to ensure the fix is effective.