ruzzy

Fuzz test Ruby code and C extensions with coverage-guided Ruzzy.

Updated Apr 5, 2026
One-click install
npx skills add https://github.com/balic-AI-ML-R-D-Resources/eliza_autonomous_agents --skill ruzzy-balic-ai-ml-r-d-resources
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ruzzy
Source: https://github.com/balic-AI-ML-R-D-Resources/eliza_autonomous_agents/tree/main/packages/skills/skills/testing-handbook-skills/skills/ruzzy
Command: npx skills add https://github.com/balic-AI-ML-R-D-Resources/eliza_autonomous_agents --skill ruzzy-balic-ai-ml-r-d-resources

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Ruzzy addresses the challenge of discovering memory safety and logic bugs in Ruby applications and their C extensions by providing a deterministic fuzzing workflow.

Core Features & Use Cases

  • Coverage-guided fuzzing for Ruby and native extensions
  • Easy harness patterns for pure Ruby and C extensions
  • Real-world use: find crashes in Ruby gems with native code

Quick Start

Run the fuzzing harness with sanitizer-enabled Ruby to begin discovering crashes.

Frequently Asked Questions about ruzzy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fuzz test Ruby C extensions for memory safety bugs?

You can fuzz test Ruby C extensions by running a coverage-guided fuzzer with sanitizer instrumentation to discover memory safety and logic bugs in native code. Ruzzy provides deterministic fuzzing workflows and harness patterns for this exact purpose.

What is coverage-guided fuzzing for Ruby applications?

Coverage-guided fuzzing for Ruby applications is a testing technique that monitors code execution paths to maximize input variety and uncover crashes. It helps discover memory safety and logic bugs in both pure Ruby targets and native C extensions.

Do I need a clang-based toolchain to fuzz test Ruby native extensions?

Yes, you need a clang-based toolchain to compile C extensions for fuzzing, along with Ruby and the ruzzy gem installed. This toolchain is required to build the native extensions with the necessary sanitizer instrumentation.

Can I fuzz test pure Ruby code or does it only work for C extensions?

You can fuzz test both pure Ruby code and Ruby C extensions using coverage-guided fuzzing. The tool provides easy harness patterns designed to support fuzzing targets written entirely in Ruby as well as native extensions.

Does Ruby fuzzing with sanitizer instrumentation work on ARM64?

Ruby fuzzing with sanitizer instrumentation works across Linux x86-64 and ARM64 architectures. This allows you to discover crashes in Ruby gems with native code on both major Linux platforms.

What is the best way to find crashes in Ruby gems with native code?

The best way to find crashes in Ruby gems with native code is using a deterministic fuzzing workflow with coverage-guided fuzzing and sanitizer instrumentation. This approach effectively surfaces memory safety and logic bugs in native extensions.