Content
85%Weight 40%Scale 1-5Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
A strong, executable playbook with concrete code for every phase of the fuzzing workflow and a validation step for crash evidence. Minor gains available in tightening inline comments and adding explicit verification checkpoints in the build/run phases.
Suggestions
Add an explicit 'verify the build is instrumented' checkpoint after section 3 (e.g., run a single input and confirm ASan is active) before proceeding to fuzzing.
Trim a few redundant inline code comments (e.g., '# replace with actual API', '# timeout per testcase (ms)') to improve token efficiency.
Consider moving the full ASan exploitability table and dedup script (sections 8–9) into a references/crash-triage.md file linked from the body, to keep SKILL.md as an overview.
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | Mostly lean and code-driven with little explaining of concepts Claude already knows, though the intro line and a few prose notes ('5–50 seeds beats 5000 random bytes') are slightly more than minimal; a few inline comments in code could be trimmed. | 4 / 5 |
Actionability | Provides copy-paste-ready bash and C code for building, harnessing, running AFL++/libFuzzer, minimizing corpora/crashes, and deduplicating crashes; concrete commands cover the common cases throughout. | 5 / 5 |
Workflow Clarity | Steps are clearly sequenced (scoping → build → harness → corpus → run → triage → exploitability → persist/validate) with a validation checkpoint in section 10 (benign negative control + validate_workspace_finding), but several earlier steps (build, corpus, run) lack explicit verify-before-proceeding checkpoints. | 4 / 5 |
Progressive Disclosure | Well-organized into numbered sections with a Tools Quick Reference table and no bundle files to over-split; content is appropriately self-contained, though the exploitability/triage detail could arguably live in a reference file and navigation between sections is implicit rather than cross-linked. | 4 / 5 |
Total | 17 / 20 Passed |