ruzzy
A coverage-guided fuzzer for Ruby and C extensions that detects memory corruption and undefined behavior.
Install
npx skills add https://github.com/trailofbits/skills --skill ruzzyStats
| Total installs | 1,155 |
| Weekly installs | 1.2K |
| GitHub stars | 4.0K |
| First seen | Jan 19, 2026 |
| Source | @trailofbits/skills |
Summary
- Fuzzes both pure Ruby code (via tracer script pattern) and Ruby C extensions with AddressSanitizer and UndefinedBehaviorSanitizer integration
- Requires Linux x86-64 or AArch64 with clang 14.0.0+; installation uses custom compiler flags for sanitizer instrumentation
- Harnesses are single-file lambdas for C extensions, two-file setup (tracer + harness) for pure Ruby; all libFuzzer options and corpus directories supported
- Detects memory corruption, use-after-free, buffer overflows, and undefined behavior; crash inputs saved automatically for reproduction
Tags
Related skills
| Skill | Installs | vs ruzzy |
|---|---|---|
| testing-handbook-generator | 1,189 | +34 |
| atheris | 1,168 | +13 |
| constant-time-analysis | 1,194 | +39 |
| auth-wechat-miniprogram | 1,073 | -82 |
| cosmos-vulnerability-scanner | 1,187 | +32 |
FAQ
- How many installs does ruzzy have?
- ruzzy has 1,155 total installs and 1.2K installs this week.
- Where is ruzzy hosted?
- ruzzy is published by @trailofbits/skills at https://github.com/trailofbits/skills.
- How many GitHub stars does ruzzy have?
- ruzzy has 4.0K GitHub stars.
- When was ruzzy first indexed?
- OrangeBot.AI first indexed ruzzy on Jan 19, 2026.
- How do I install ruzzy?
- Run: npx skills add https://github.com/trailofbits/skills --skill ruzzy