Fuzz Harness Builder

Use this skill after engagement-scope has established the authorized target, scope evidence, environment, impact tolerance, execution limits, and desired deliverable. Fuzz only local, lab, CI, or explicitly authorized targets.

Fuzzing is expensive and noisy. Prefer binary-reversing, binary-debugging, and code-vulnerability-review first when a question can be answered by static analysis, one crash reproduction, source tracing, patch review, or targeted debugging. Use this skill only when there is a concrete reason to believe a fuzzing campaign will pay for its long-running cost.

Fuzzing Gate

Proceed only when most of these are true: