Implements continuous fuzz testing infrastructure for open-source projects using Google's OSS-Fuzz framework.
This skill provides specialized guidance for implementing and managing OSS-Fuzz, the industry-standard distributed fuzzing infrastructure for open-source software. It assists developers in enrolling projects, creating necessary configuration files like project.yaml and Dockerfiles, and executing local tests using the OSS-Fuzz helper script. By providing best practices for harness creation, coverage analysis, and crash reproduction, it helps identify critical security vulnerabilities and stability issues through automated, continuous testing workflows.
主要功能
01Automated generation of Dockerfiles and build scripts for fuzzing
02Integration guidance for libFuzzer and AFL++ engines
03Local execution and debugging of fuzzer harnesses via helper.py
04OSS-Fuzz project enrollment and configuration assistance
050 GitHub stars
06Code coverage analysis and crash reproduction workflows
使用场景
01Setting up continuous fuzzing for a new open-source library
02Reproducing and fixing crashes reported by the OSS-Fuzz bug tracker
03Optimizing fuzzer performance through coverage analysis and Fuzz Introspector
