skills.rest
SensLiao
SensLiaoCOMMUNITY
Explore all skills by this author →
GitHub

security-app-fuzzing

Run coverage-guided fuzzing across multiple languages with ClusterFuzzLite CI integration.

Updated May 28, 2026
Search Tags:#AI agent#code security#parser#fuzzing#coverage guided#structure aware#deserializer
One-click install
npx skills add https://github.com/SensLiao/Claude-code-setting --skill security-app-fuzzing
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-app-fuzzing
Source: https://github.com/SensLiao/Claude-code-setting/tree/main/skills/security-app-fuzzing
Command: npx skills add https://github.com/SensLiao/Claude-code-setting --skill security-app-fuzzing

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides coverage-guided, structure-aware fuzzing for your code and authorized targets, identifying parser crashes, deserializer RCE, integer overflow, memory corruption, and other bugs that traditional testing may miss.

Core Features & Use Cases

  • Coverage-Guided Fuzzing: Utilizes fuzzing to automatically discover edge cases that are hard to find with manual testing.
  • Structure-Aware Fuzzing: Focuses on inputs with strong structures (like JSON or XML) to improve fuzzer efficiency.
  • Per-Language CLI Wrapping: Provides scripts for integrating various programming languages with fuzzing tools like libFuzzer, AFL++, cargo-fuzz, Atheris, Jazzer, Go-native, JS fast-check.
  • ClusterFuzzLite CI Integration: Facilitates CI-driven fuzzing using ClusterFuzzLite.

Quick Start

Activate the 'security-app-fuzzing' skill with a project that has parser/decoder/deserializer code or file upload functionality.

Frequently Asked Questions about security-app-fuzzing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How does coverage-guided fuzzing find security vulnerabilities in parsers and deserializers?▼

Coverage-guided fuzzing discovers security vulnerabilities in parsers and deserializers by automatically generating structured inputs to trigger edge cases like RCE, integer overflow, and memory corruption that traditional testing misses.

Can I use ClusterFuzzLite to automate fuzzing in my CI pipeline for parser RCE and memory corruption bugs?▼

Yes, you can use ClusterFuzzLite to automate CI-driven fuzzing, continuously running structured and coverage-guided fuzzing to detect parser crashes, deserializer RCE, and memory corruption bugs in your code.

What fuzzing tools do I need to know for structure-aware fuzzing across different programming languages?▼

Structure-aware fuzzing across languages requires knowledge of libFuzzer, AFL++, cargo-fuzz, Atheris, Jazzer, Go-native, and JS fast-check, integrated through per-language fuzzing CLI wrappers.

What is the best way to fuzz AI agent tool boundaries and state machines for input validation flaws?▼

The best way to fuzz AI agent tool boundaries and state machines is using structure-aware fuzzing to generate valid yet edge-case inputs, identifying invalid state transitions and boundary vulnerabilities efficiently.

Does structure-aware fuzzing work with JSON and XML file upload functionality to find edge cases?▼

Yes, structure-aware fuzzing works with JSON and XML file upload functionality by focusing on strongly structured inputs, significantly improving fuzzer efficiency to discover parser crashes and edge cases.

Related Skills

Explore More Software Engineering Skills→
macaughmacaugh
5

Fuzzing Harness Development

Develop fuzzing harnesses for C, C++, and Python projects with libFuzzer and AFL++.

Community
Advanced
AcczdyAcczdy
2

performing-fuzzing-with-aflplusplus

Automate coverage-guided fuzzing of compiled binaries with AFL++.

Community
Advanced
iiammaeiiammae

c-review

Automate security review of C/C++ applications for memory corruption, integer overflows, and race conditions.

Community
Advanced
amano--amano--

atheris

Automate coverage-guided fuzzing of Python code and C extensions with libFuzzer and AddressSanitizer.

Community
Intermediate