Skip to content
SkillCheatSheet Sign in

aflpp

An AI agent skill from trailofbits/skills, scored 59 out of 100 by code.

59/ 100C

Code score by group

  • Spec18/20
  • Description12/20
  • Procedure9/15
  • Done criteria4/15
  • Resources5/10
  • Scripts2/8
  • Safety7/7
  • Upkeep2/5

It loses the most points in Done criteria (11), the group that checks whether there is a checklist and a step that verifies the work.

What the author says it does

Sets up and runs AFL++ for multi-core fuzzing of C/C++ projects built with afl-clang-fast or afl-gcc-fast. Covers instrumentation modes, parallel main and secondary campaigns, persistent mode, corpus minimization, and crash triage. Use when scaling fuzzing across cores, fuzzing a mature C/C++ codebase, reading the afl-fuzz status screen, or moving on after libFuzzer has plateaued.

This is the description in the skill's own SKILL.md, written by its author, not by SkillCheatSheet.

Repository
trailofbits/skills
Folder
plugins/testing-handbook-skills/skills/aflpp
License
CC-BY-SA-4.0
GitHub stars
8,147
SKILL.md lines
645
Other files
2

Add aflpp to your agent

npx skills add trailofbits/skills --skill aflpp

The command uses the open skills CLI. A skill is instructions and scripts your agent will follow, so read it first: open the folder on GitHub at the commit that was scored.

More skills from trailofbits/skills

  1. cvss-scoring

    Produces CVSS v4.0 vector strings from plain-text vulnerability descriptions by systematically evaluating base metrics. Use when scoring a vulnerability, generating a CVSS vector,…

    Verified85A
  2. cosmos-vulnerability-scanner

    Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence. 25 core + 16 IBC + 10 EVM + 3 CosmWas…

    Verified84B
  3. codeql

    Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "build codeql database…

    Verified83B
  4. graph-evolution

    Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-relevant structural changes. Detects new attack paths, complexi…

    Verified82B
  5. post-patch-validation

    Validates security patches with reproducible baseline-versus-patched evidence, including original exploits, root-cause variants, behavior preservation, regressions, and newly intr…

    Verified82B
  6. semgrep

    Runs a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every approved ruleset through scripts/run-sc…

    Verified82B
  7. yara-rule-authoring

    Guides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or optimizing YARA rules. Covers naming conventions, string select…

    Verified81B
  8. crypto-protocol-diagram

    Extracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), or Tamarin (.spthy) models and generates Mermaid sequenceDiagra…

    Verified80B

All skills in trailofbits/skills

Scores come from a snapshot of 300 public GitHub repositories taken on 12 November 2026. Every score is the result of fixed checks run by code; no AI is involved. How scoring works.