ruzzy

Run coverage-guided fuzz testing on Ruby applications and C extensions with Ruzzy.

Updated Jul 10, 2025
One-click install
npx skills add https://github.com/Superlend/superloop-core-contracts --skill ruzzy
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ruzzy
Source: https://github.com/Superlend/superloop-core-contracts/tree/main/.cursor/skills/testing-handbook-skills/skills/ruzzy
Command: npx skills add https://github.com/Superlend/superloop-core-contracts --skill ruzzy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Ruzzy provides coverage-guided fuzzing for Ruby applications and Ruby C extensions, helping identify memory and usage issues early in development.

Core Features & Use Cases

  • Pure Ruby fuzzing: Use tracer/harness patterns to exercise Ruby code paths.
  • C extension fuzzing: Target native extensions for memory-safety testing.
  • Security-oriented workflows: Detect crashes and undefined behavior in Ruby environments during CI or local development.

Quick Start

Install and run the fuzzing workflow following the notes described in the skill documentation to begin testing Ruby code and extensions.

Frequently Asked Questions about ruzzy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform fuzz testing on Ruby C extensions?

Fuzz testing for Ruby C extensions uses coverage-guided fuzzing to exercise native code and detect memory-safety issues. By targeting native extensions with a fuzzing harness, you can identify crashes and undefined behavior early in development.

What is coverage-guided fuzzing for Ruby applications?

Coverage-guided fuzzing for Ruby applications uses tracer and harness patterns to exercise pure Ruby code paths. This mechanism helps identify memory and usage issues by continuously generating inputs that trigger new execution branches.

Do I need sanitizer-enabled toolchains for Ruby fuzzing?

Yes, Ruby fuzzing requires sanitizer-enabled toolchains to perform memory-safety validation. These toolchains work with the fuzzing harness to detect undefined behavior and memory corruption in Ruby C extensions during security testing.

Can I use fuzzing to detect memory issues in Ruby environments during CI?

Yes, you can integrate fuzzing into security-oriented workflows to detect crashes and undefined behavior in Ruby environments during CI. Automated fuzz testing validates memory safety for both pure Ruby targets and C extensions.

What's the best way to set up a security testing harness for Ruby code?

Setting up a security testing harness for Ruby code involves installing the ruzzy gem and configuring tracer patterns for pure Ruby or C extension targets. This enables coverage-guided fuzzing to validate memory safety in Linux environments.