Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →trailofbits/ossfuzz
OSS-Fuzz provides free continuous fuzzing for open source projects.
Passed 20 of 21 test cases with the skill, and 18 of 21 without it.
2 fixed19 passed either way1 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
A test case the skill fixed. Same model, same prompt, with and without the skill.
I need to measure the coverage achieved by my local fuzzing harness without downloading external corpus archives. Could you show me the command line sequence to build the coverage binary and produce the hosted local coverage report?
| Checked | Without skill | With skill |
|---|---|---|
| The coverage binary build uses --sanitizer=coverage with helper.py. | Missed | Passed |
| The coverage command includes the --no-corpus-download flag. | Missed | Passed |
The instructions your model reads when the skill loads.
OSS-Fuzz is an open-source project developed by Google that provides free distributed infrastructure for continuous fuzz testing. It streamlines the fuzzing process and facilitates simpler modifications. While only select projects are accepted into OSS-Fuzz, the project's core is open-source, allowing anyone to host their own instance for private projects.
OSS-Fuzz provides a simple CLI framework for building and starting harnesses or calculating their coverage. Additionally, OSS-Fuzz can be used as a service that hosts static web pages generated from fuzzing outputs such as coverage information.
| Concept | Description |
|---|---|
| helper.py | CLI script for building images, building fuzzers, and running harnesses locally |
| Base Images | Hierarchical Docker images providing build dependencies and compilers |
| project.yaml | Configuration file defining project metadata for OSS-Fuzz enrollment |
| Dockerfile | Project-specific image with build dependencies |
| build.sh | Script that builds fuzzing harnesses for your project |
| Criticality Score | Metric used by OSS-Fuzz team to evaluate project acceptance |
Apply this technique when:
Skip this technique when:
| Task | Command |
|---|---|
| Clone OSS-Fuzz | git clone https://github.com/google/oss-fuzz |
| Build project image | python3 infra/helper.py build_image --pull <project> |
test cases passed, vs 18 / 21 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.