harness-writing
Guide for writing effective fuzzing harnesses in C/C++, Rust, Go, and Python to find security bugs and improve coverage.
Install
npx skills add https://github.com/trailofbits/skills --skill harness-writingStats
| Total installs | 1,192 |
| Weekly installs | 1.2K |
| GitHub stars | 4.0K |
| First seen | Jan 19, 2026 |
| Source | @trailofbits/skills |
Summary
- Covers harness fundamentals for C/C++, Rust, Go, and Python, including entry point signatures, input validation, and structured data extraction using FuzzedDataProvider and arbitrary crate
- Includes step-by-step guidance from identifying entry points through testing and iteration, with practical patterns for integer casting, complex inputs, and interleaved fuzzing of multiple operations
- Provides tool-specific harness implementations for libFuzzer, AFL++, cargo-fuzz, and go-fuzz, with compilation flags and running instructions
- Details anti-patterns to avoid (global state, blocking I/O, memory leaks, calling exit), determinism requirements, and troubleshooting strategies for low coverage or non-reproducible crashes
Tags
Related skills
| Skill | Installs | vs harness-writing |
|---|---|---|
| entry-point-analyzer | 1,266 | +74 |
| sarif-parsing | 1,289 | +97 |
| fuzzing-obstacles | 1,266 | +74 |
| constant-time-testing | 1,176 | -16 |
| firebase-apk-scanner | 1,197 | +5 |
FAQ
- How many installs does harness-writing have?
- harness-writing has 1,192 total installs and 1.2K installs this week.
- Where is harness-writing hosted?
- harness-writing is published by @trailofbits/skills at https://github.com/trailofbits/skills.
- How many GitHub stars does harness-writing have?
- harness-writing has 4.0K GitHub stars.
- When was harness-writing first indexed?
- OrangeBot.AI first indexed harness-writing on Jan 19, 2026.
- How do I install harness-writing?
- Run: npx skills add https://github.com/trailofbits/skills --skill harness-writing