One-click install
npx skills add https://github.com/awfixers-stuff/opencode-config --skill fuzzing-awfixers-stuff
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: fuzzing
Source: https://github.com/awfixers-stuff/opencode-config/tree/main/skills/fuzzing
Command: npx skills add https://github.com/awfixers-stuff/opencode-config --skill fuzzing-awfixers-stuff

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Guide developers to discover and reproduce crashes and undefined behavior caused by unexpected or malformed inputs in C and C++ code by using coverage-guided fuzzing tools and sanitizers.

Core Features & Use Cases

  • Fuzz target templates: Provide libFuzzer and AFL++ harness patterns for in-process and fork-based fuzzing.
  • Build and sanitizer guidance: Recommend Clang build flags for libFuzzer and sanitizer combinations (ASan, UBSan, MSan) to surface memory and undefined-behavior bugs.
  • Corpus and CI management: Explain seeding, minimization, merging of corpora, running short regression fuzz jobs in CI, and integrating with OSS-Fuzz or ClusterFuzz.
  • Reproduction and debugging: Steps to reproduce crashes, minimize crash inputs, and debug with tools such as gdb and coverage reporters.

Quick Start

Set up and run libFuzzer for my C parser by creating a fuzz target, compiling with Clang and sanitizer flags, seeding a corpus, and reproducing any crashes.

Frequently Asked Questions about fuzzing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up libFuzzer to find crashes in my C parser?

Set up libFuzzer for a C parser by creating a fuzz target, compiling with Clang sanitizer flags, seeding a corpus, and running the fuzzer to discover and reproduce input-driven crashes.

What Clang sanitizer flags do I need for coverage-guided fuzzing?

Coverage-guided fuzzing uses Clang build flags to combine libFuzzer with ASan, UBSan, and MSan sanitizers, which surface memory errors and undefined behavior during automated crash reproduction.

Can I integrate fuzzing regression checks into my CI pipeline?

You can integrate fuzzing into CI regression checks by running short fuzz jobs, managing corpus merging and minimization, and connecting to infrastructure like OSS-Fuzz or ClusterFuzz for continuous testing.

What is the best way to reproduce and debug a crash artifact from a fuzzer?

Reproduce and debug a crash artifact by minimizing the crash input and using debugging tools like gdb alongside coverage reporters to isolate the exact root cause of the malformed input bug.

Does fuzzing work for both in-process and fork-based testing?

Fuzzing supports both in-process and fork-based testing by providing specific libFuzzer and AFL++ harness patterns, allowing you to target parsers and I/O boundaries effectively based on your architecture.