fuzzing-memory-unsafe-expert
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- Educational Content and Best Practices: The skill provides detailed instructions on threat modeling, identifying attack surfaces, and using sanitizers (ASan, MSan, UBSan) to detect memory safety issues in C/C++ projects. This is standard practice for software security testing.
- Standard Build Tooling: The instructions and examples utilize common development tools such as
cmake,make, and theoss-fuzzhelper scripts. These are used within their intended context for building and validating fuzzing harnesses. - Harness Templates: The provided C++ and Bash code snippets are typical templates for
libFuzzerharnesses and OSS-Fuzz build scripts. They include common practices like usingFuzzedDataProviderto safely consume input andLLVMFuzzerInitializefor one-time setup. - Security Posture: No malicious patterns, obfuscation, data exfiltration, or unauthorized persistence mechanisms were identified. The skill correctly identifies the management of untrusted data as a critical component of the fuzzing process.
Audit Metadata