What is OSS-Fuzz used for?

OSS-Fuzz provides distributed, continuous fuzz testing infrastructure for open-source projects to find security vulnerabilities and stability bugs.

Can I use this for private repositories?

While Google's OSS-Fuzz service is for open-source, you can use this skill to set up and run a private instance of the OSS-Fuzz framework for internal projects.

Which fuzzing engines are supported?

This skill primarily supports libFuzzer and AFL++, which are the standard engines used within the OSS-Fuzz ecosystem.

How do I check my project's eligibility for Google OSS-Fuzz?

Eligibility is often determined by a Criticality Score; this skill provides guidance on evaluating your project's score and metadata requirements for enrollment.

OSS-Fuzz Integration

Name: OSS-Fuzz Integration
Author: fjor1025

byfjor1025

0•

Security & Testing

Streamlines the setup, local testing, and enrollment of open-source projects into the Google OSS-Fuzz continuous fuzzing infrastructure.

This skill provides a comprehensive framework for implementing automated fuzz testing using OSS-Fuzz. It guides users through creating project configurations, Docker-based build environments, and fuzzing harnesses while facilitating local reproduction of crashes and coverage analysis. By leveraging structured patterns for libFuzzer and AFL++, it helps maintainers improve software security and reliability through distributed, continuous testing without the need to manage their own infrastructure.

Key Features

01Step-by-step guidance for reproducing and debugging OSS-Fuzz crash reports

02Local coverage report generation and Fuzz Introspector integration

030 GitHub stars

04CLI command automation for building and running harnesses via helper.py

05Automated generation of project.yaml, Dockerfile, and build.sh templates

06Support for AddressSanitizer (ASan) and LeakSanitizer (LSan) workflows

Use Cases

01Developing and testing fuzzing harnesses locally before deployment

02Analyzing code coverage to identify untested branches in complex C/C++ codebases

03Enrolling a new open-source project into Google's free distributed fuzzing service

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fjor1025/infosec-framework ossfuzz

For use in Claude.ai and ChatGPT

Download Skill