aflpp
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a shell wrapper script (
./afl++) designed to facilitate running AFL++ commands on the host or within a Docker container. The script usesbash -c "$*"to pass arguments directly to the shell.\n- [COMMAND_EXECUTION]: Contains instructions for system-level performance tuning, including the use ofdocker run --privilegedand disabling kernel security mitigations viaupdate-grub. These high-privilege actions are explicitly identified as necessary for fuzzing performance and are accompanied by a security warning advising the use of dedicated virtual machines.\n- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download a utility header (argv-fuzz-inl.h) from the official AFL++ GitHub repository and pulls Docker images from the officialaflplusplusDocker Hub account. These references target well-known project infrastructure.
Audit Metadata