fuzzgptlisted
Install: claude install-skill Lu1sDV/skillsmd
# FuzzGPT — History-Driven LLM Fuzzing
> **FuzzGPT-derived: retrieval replaces fine-tuning.** The original paper's FS and ZS
> variants are reproduced faithfully. Fine-tuning (FT) is replaced by an
> embedding-retrieval pathway (RT) — see `references/retrieval.md`.
**Core hypothesis (the whole skill rests on this):** historical bug-triggering
programs contain rare, valuable *code ingredients* — special values (`NaN`,
`inf`, `INT_MAX`, empty/oversized inputs), edge-case shapes/sizes/lengths,
0-size dimensions, unconventional use of the target — that ordinary LLM
generation never produces. LLMs trained on GitHub generate *typical* programs;
fuzzing wants *unusual* ones. FuzzGPT closes that gap by priming the LLM with
real past bugs instead of asking it to be "creative."
This is the unusual-input engine. It pairs with `vuln-research` (which decides
*what* to target and triages findings); FuzzGPT decides *how* to generate inputs
that actually hit edge cases.
## The unit you fuzz: the "fuzz target"
FuzzGPT steers generation toward one **fuzz target** at a time — the specific
unit of functionality you want to stress (here, *the unit you point generation
at*, not a libFuzzer harness). In the paper's DL-library study the fuzz target
is an **API** (e.g. `torch.gather`), and the references use API examples
throughout, but the method is unit-agnostic. Map "fuzz target" to your domain:
| Domain | A "fuzz target" is… | Example |
|--------|---------------------|---------|
| DL / nume