skills/mukul975/anthropic-cybersecurity-skills/implementing-fuzz-testing-in-cicd-with-aflplusplus/Gen Agent Trust Hub
implementing-fuzz-testing-in-cicd-with-aflplusplus
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements automated fuzz testing workflows using AFL++. Its logic is contained within standard Python scripts and markdown documentation.\n- [COMMAND_EXECUTION]: The
scripts/agent.pyutility invokes AFL++ toolchain commands (e.g.,afl-fuzz,afl-cmin,afl-clang-fast) and the target binary using thesubprocessmodule. These calls are essential for the skill's functionality and use list-based command construction which helps mitigate shell injection risks.\n- [SAFE]: Thescripts/process.pyscript performs local filesystem operations to aggregate fuzzing statistics and generate reports. It does not perform network operations or access sensitive system directories.\n- [SAFE]: Documentation includes references to reputable external sources, including the official AFL++ GitHub repository and established security guides. No suspicious or obfuscated URLs were detected.
Audit Metadata