ossfuzz

npx skills add trailofbits/skills --skill ossfuzz --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

# OSS-Fuzz [OSS-Fuzz](https://google.github.io/oss-fuzz/) is an open-source project developed by Google that provides free distributed infrastructure for continuous fuzz testing. It streamlines the fuzzing process and facilitates simpler modifications. While only select projects are accepted into OSS-Fuzz, the project's core is open-source, allowing anyone to host their own instance for private projects. ## Overview OSS-Fuzz provides a simple CLI framework for building and starting harnesses or calculating their coverage. Additionally, OSS-Fuzz can be used as a service that hosts static web pages generated from fuzzing outputs such as coverage information. ### Key Concepts | Concept | Description | |---------|-------------| | **helper.py** | CLI script for building images, building fuzzers, and running harnesses locally | | **Base Images** | Hierarchical Docker images providing build dependencies and compilers | | **project.yaml** | Configuration file defining project metadata for OSS-Fuzz enrollment | | **Dockerfile** | Project-specific image with build dependencies | | **build.sh** | Script that builds fuzzing harnesses for your project | | **Criticality Score** | Metric used by

git clone https://github.com/google/oss-fuzz
cd oss-fuzz
python3 infra/helper.py --help
python3 infra/helper.py build_image --pull <project-name>
python3 infra/helper.py build_fuzzers --sanitizer=address <project-name>
python3 infra/helper.py run_fuzzer <project-name> <harness-name> [<fuzzer-args>]
python3 infra/helper.py build_fuzzers --sanitizer=coverage <project-name>
python3 infra/helper.py coverage <project-name>
Clone and navigate to OSS-Fuzz
Build and run irssi fuzzer