Create Fuzzing — Development skill for Claude Code
Create or run Go fuzz harnesses for authorized targets and triage resulting crashes.
How to install Create Fuzzing
Installs to ~/.claude/commands/openshift-traust-create-fuzzing.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/openshift/traust/HEAD/.claude/commands/create-fuzzing.md -o ~/.claude/commands/openshift-traust-create-fuzzing.md Restart Claude Code, or start a new session, for it to be picked up.
What Create Fuzzing does
description: "Create or run Go fuzz harnesses for authorized targets and triage resulting crashes."
Author and/or run Go-native fuzz harnesses for $ARGUMENTS using the create-fuzzing skill. Load the skill at .claude/skills/create-fuzzing/SKILL.md and follow its full procedure — locate or add a targets.json entry, author a white-box *_fuzz_test.go under harnesses//, drive `make clone install build fuzz-`, and triage any crashers into follow-up findings. `$ARGUMENTS` may be a repo
Alternatives in Development
- Auto Update — Pull the latest ECC repo changes and reinstall the current managed targets 243.5k ★
- Fuzz 2.3k ★
- Agentic Stack — One brain, many harnesses 2.2k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Fuzz Hidden Paths
Discover hidden directories/files with tech-aware SecLists slicing + ffuf, fed by recon intel. Use for hidden-
Fuzz Build
Build AFL++ for Android arm64 + the fuzzing harness, and push to the emulator
Fuzz Run
Run an on-device AFL++ campaign and report crashes/execs
Do Sentry Triage
Triage Sentry crashes for an iOS release into Linear tickets
Dagger
Run controlled pressure fuzzing, destructive local failure tests, and negative validations.
Orpheus
Orpheus is an Agent Runtime that solves the 'Silent Failure' of CPU autoscaling. It scales on queue depth, per
Related Agents
Fuzz Agent
Discover hidden directories and files using tech-aware SecLists slicing. Replaces spray fuzzing with surgical
Ext Enumerator
Runs the RECON + ENUMERATION phase of an authorized external penetration test against the in-scope targets (IP
QA Security Tester
Security-minded QA tester for AUTHORIZED targets only (the user's own app, local/staging). Performs non-destru