fuzzing-dictionary
4 findings (1 critical, 3 low), mainly data exfiltration, policy violation, hardcoded secrets. Most recent scan 2026-02-08.
This skill appears to be a documentation-focused educational resource about fuzzing dictionaries rather than an executable skill with active code. The security posture is generally safe with only minor documentation and metadata completeness issues. No active threats were detected - there are no scripts, no network calls, no data exfiltration attempts, no prompt injection, and no malicious code. The skill provides legitimate technical guidance on using fuzzing dictionaries with tools like libFuzzer, AFL++, and cargo-fuzz. The primary concerns are informational: missing optional metadata fields and incomplete documentation with references to files not included in the package.
Scanner's overall assessment (LLM analyzer)
Second scanner: NVIDIA SkillSpector
SkillSpector found no issues but could not fully inspect the package, usually because SKILL.md refers to a file that is not present, so it fails closed to CAUTION instead of SAFE. Read it as "not fully checked", not as a finding. How the two scanners compare across the whole corpus: Two scanners, one corpus.
What this skill does
Fuzzing dictionaries guide fuzzers with domain-specific tokens. Use when fuzzing parsers, protocols, or format-specific code.
- Package
- 1 file, 9.5 KB
- SKILL.md
- 1339 words, 12+ sections
- Code
- None. Instructions only.
SKILL.md covers: Fuzzing Dictionary · Overview · Key Concepts · When to Apply · Quick Reference · Step-by-Step · Step 1: Create Dictionary File · Lines starting with '#' and empty lines are ignored. · Adds "blah" (w/o quotes) to the dictionary. · Use \\ for backslash and \" for quotes. · Use \xAB for hex values · the name of the keyword followed by '=' may be omitted:
Findings
CRITICAL CREDENTIAL HARVESTING detected by YARA Hardcoded Secretsstatic
Detects potential exposure of sensitive information like API keys, passwords, tokens, and certificates: export AFL_LLVM_DICT2FILE
SKILL.md:172
export AFL_LLVM_DICT2FILE=auto.dictLOW Skill does not specify a license Policy Violationstatic
Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.
SKILL.md
LOW Missing Optional Metadata Fields Data Exfiltrationllm
The skill manifest is missing optional metadata fields including 'license', 'compatibility', and 'allowed-tools'. While these fields are optional per the agent skills specification, their absence reduces transparency about the skill's requirements and restrictions.
SKILL.md
license: Not specified
compatibility: Not specified
allowed-tools: Not specifiedLOW Referenced Files Not Found in Package Data Exfiltrationllm
The skill instructions reference four files (harness.py, header.py, string.py, binary.py) that are not included in the skill package. While the instructions appear to be incomplete (Step 2 cuts off mid-sentence), these missing files could indicate incomplete packaging or documentation issues.
Files referenced in instructions: harness.py, header.py, string.py, binary.py - all marked as 'not found'What is in the package
| File | Kind | Size |
|---|---|---|
SKILL.md | doc | 9.5 KB |
External hosts referenced
github.com llvm.org
Hostnames that appear in the skill's files. Referencing a host is not a finding; compare against the findings above and the skill's stated purpose.
Package contents recorded 2026-10-22 at commit a50696e20581. The scan above ran against the version current at scan time; the two can differ if the skill has since been updated.
What we checked
- Static analyzer. Pattern rules over SKILL.md and bundled files: known-bad commands, exfiltration URLs, secrets, obfuscation.
- Llm analyzer. A language model reads the skill and reports intent-level issues the rules cannot express.
- Meta analyzer. A second model pass that validates, deduplicates and re-scores the other analyzers' findings.
What we did not check
- Runtime behaviour. The skill was not executed; findings come from reading its files.
- Anything fetched at install or run time, including remote scripts, package dependencies, and URLs the skill tells the agent to open.
- Content the analyzers cannot read: images, binaries, and some non-English text.
- Known scanner bypass classes. See the methodology and limitations page.
Sources
- Repository: https://github.com/trailofbits/skills
- Raw scan result: plugins-testing-handbook-skills-skills-fuzzing-dictionary-scan.json
- Badge for your README:
- Request a re-scan