CoPirate

Very cool that you built out a full UI of a specific example. The in-app explanation of what happened is also quite helpful. I think it would’ve been a bit more impactful if the malicious code was less obvious and accomplished a desirable (to the hacker), rather than just destructive, task.

Great entry!You really can feel the rush and “there’s no time to look at everything”, and the copy paste. The demo does a good job of conveying a sense of overwhelm to the player and when they might rely on coding assistants too much.It does need some polish overall, especially with the document visualization, and I also feel like it would have been better if it used a fake pypi repo that had been “compromised” instead of direct system prompts, but the way the model disguises the removal of the files is very good as it is.The subject matter is important, in that we might head toward more and more unsupervised automation which means more point for vulnerabilities.To me, this is a solid entry and would love to see a polished version of it.

A nicely executed project! The simulation → debrief format is well executed, and the task is short enough that many users would make it to debrief. A next step might be to think more about the threat model shown - in what situations would targets be using a compromised coding assistant, and is there a more direct threat model in those cases?