fuzzing-test

Solid

Generate Go fuzz tests (Go 1.18+ testing.F) for specified code when users ask for fuzzing/模糊测试/fuzz test generation, parser robustness, round-trip, or differential fuzzing. Always run an applicability gate first; if the target is not suitable, explain concrete reasons and stop without writing fuzz test code.

AI & Automation 30 stars 5 forks Updated yesterday MIT

Install

View on GitHub

Quality Score: 85/100

Stars 20%
50
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
80
License 10%
100
Description 5%
100

Skill Content

# Fuzzing Test Skill (Go) Generate high-signal Go fuzz tests only when targets are suitable. ## Quick Reference — Load References Selectively Read the section named below first; load the reference only when its trigger applies. | When you need to… | Section | Load on demand | |---|---|---| | Decide if a target is suitable | §Applicability Gate (**run first, always**) | `applicability-checklist.md` — full decision tree, oracle forms, version gate, borderline cases | | Choose among 3+ candidate targets | §Target Priority Gate | `target-priority.md` — bug-yield ranking and tie-breaks | | Write the harness | §Minimal Templates | — | | Handle a discovered crash | §Crash Handling | `crash-handling.md` — triage steps, corpus policy, report template | | Set up CI | §CI Strategy | `ci-strategy.md` — Actions config, corpus caching, budgets | | Diagnose a slow/ineffective run, OOM, leak, or flake | §Fuzz Performance Baseline | `advanced-tuning.md` — seed quality, skip-rate, allocation profiling | | Avoid or check for common mistakes | §Quality Scorecard | `anti-examples.md` — 9 BAD/GOOD harness patterns | ## Applicability Gate (Must Run First) Before writing any fuzz code, evaluate suitability. If the target fails this gate, the entire remaining workflow is skipped — output the verdict, suggest alternatives, and stop. Mark each item `Pass` / `Fail`: 1. Target has meaningful input space (not trivial fixed-path logic). 2. Target can be driven by Go fuzz-supported parameter types. ...

Details

Author
johnqtcg
Repository
johnqtcg/awesome-skills
Created
6 months ago
Last Updated
yesterday
Language
Python
License
MIT

Integrates with

Similar Skills

Semantically similar based on skill content — not just same category

AI & Automation Listed

fuzzgpt

Use when you want to fuzz any software target — library, compiler, interpreter, parser, kernel/syscall, DB engine, SMT solver, binary/file format, or network protocol — by priming an LLM with that target's HISTORICAL bug-triggering code to generate unusual, edge-case inputs (history-driven LLM fuzzing). FuzzGPT-derived: retrieval replaces fine-tuning (Deng et al., arXiv:2304.02014): mine bug reports → auto-label each snippet's buggy fuzz target → few-shot / zero-shot / retrieval generation → crash + differential oracles. Trigger on "FuzzGPT", "fuzz this library/compiler/parser/protocol", "generate edge-case test programs", "history-driven fuzzing", or when pairing with vuln-research to turn a target's bug history into fresh fuzzing inputs. Target-agnostic: the "fuzz target" is whatever unit you point generation at — an API in the paper's DL study, but equally a compiler flag, SQL feature, syscall, opcode, or protocol field.

2 Updated 3 days ago
Lu1sDV
Data & Documents Featured

offensive-fuzzing

Practical offensive fuzzing methodology covering target identification, fuzzer selection (AFL++, libFuzzer, Honggfuzz, Boofuzz, syzkaller), harness writing, corpus curation, mutation strategies, coverage measurement, and crash triage. Use when setting up or running fuzz campaigns against any target: file parsers, network protocols, kernel drivers, EDR engines, embedded firmware, or language runtimes.

6,950 Updated 6 days ago
SnailSploit
Data & Documents Featured

offensive-fuzzing

Practical offensive fuzzing methodology covering target identification, fuzzer selection (AFL++, libFuzzer, Honggfuzz, Boofuzz, syzkaller), harness writing, corpus curation, mutation strategies, coverage measurement, and crash triage. Use when setting up or running fuzz campaigns against any target: file parsers, network protocols, kernel drivers, EDR engines, embedded firmware, or language runtimes.

719 Updated 1 months ago
0xwilliamortiz