qa-fuzz-testing

Coverage-guided fuzzing with libFuzzer, AFL++, cargo-fuzz, Go native fuzzing, Atheris and Jazzer, plus sanitizer crash triage. Covers fuzzer choice, corpus management, sanitizer integration, and ASan / UBSan / MSan crash classification with bulk triage. A builder agent (fuzz-target-author) scaffolds a fuzz harness from a function signature. Binary and system-level fuzzing, distinct from qa-property-based and qa-api-testing/schemathesis-fuzzing.

Install this plugin
/plugin install qa-fuzz-testing@testland-qa

First time? Add the marketplace with /plugin marketplace add testland/qa

View source (opens in a new tab)
Plugin
Version
v1.5.1
Contents
1 skill · 1 agent

Skills1

Agents1

About qa-fuzz-testing

Structure-aware coverage-guided fuzzing: the coverage-guided-fuzzing umbrella skill (fuzzer choice + engine-generic workflow, with libFuzzer, AFL++, cargo-fuzz, Go native, Atheris, Jazzer, corpus-management, sanitizer-integration and crash triage (per-crash reading and the bulk BLOCK/PASS triage workflow) as references) + 1 agent (fuzz-target-author). Distinct from qa-property-based (hypothesis-driven + shrinking) and qa-api-testing/schemathesis-fuzzing (API-layer); this is binary/system-level coverage-guided fuzzing.

Differentiation

This plugin scopes structure-aware coverage-guided fuzzing at the binary / system level. Sibling neighbours:

  • qa-property-based - hypothesis-driven property-based testing with shrinking (Hypothesis, fast-check, proptest, jqwik, quickcheck). Different methodology: PBT generates from specifications; fuzzing follows coverage feedback.
  • qa-api-testing - has schemathesis-fuzzing (schema-driven API fuzzing) and restler-fuzzing (stateful API sequences). API-layer; this plugin is binary/system-level.
  • qa-security-scanning - static / dynamic security analysis (SAST / DAST) without coverage-guided mutation.