alvinhayy

Fuzz Validate — Development skill for Claude Code

Development community

Prove the fuzz harness actually reaches the target (poison-pointer + under-alloc controls).

How to install Fuzz Validate

Installs to ~/.claude/commands/alvinhayy-mobile-reverseskill-fuzz-validate.md

Terminal

mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/alvinhayy/Mobile-ReverseSkill/HEAD/.claude/commands/fuzz-validate.md -o ~/.claude/commands/alvinhayy-mobile-reverseskill-fuzz-validate.md

Restart Claude Code, or start a new session, for it to be picked up.

What Fuzz Validate does

description: Prove the fuzz harness actually reaches the target (poison-pointer + under-alloc controls) argument-hint: "[target-lib.so]"

Invoke the **afl-fuzzing** skill and run the harness **positive controls** before trusting any result for `${ARGUMENTS:-the current target}`.

A "0 crashes" campaign is meaningless if the harness never reaches the parser. Verify:

Negative control — real harness on a benign seed → must exit clean (no false crash).
Poison-pointer — rebuild

Alternatives in Development

Fuzz 2.3k ★
/hunt — Active vulnerability hunting on a target 1.8k ★
Lacp — Local-first policy, evidence, memory, and recovery controls for Claude, Codex, Hermes, and other CLI coding ag 300 ★