Agent skill

Fuzz Generator

by alt-research2 in alt-research2/SolidityGuard

Generates Foundry invariant tests and Echidna property-based fuzz tests for Solidity contracts.

Custom licenceAuto-check: notesBackend & APIs

Install Fuzz Generator

skills CLI
$ npx skills add alt-research2/SolidityGuard --skill fuzz-generator -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install alt-research2/SolidityGuard fuzz-generator --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/alt-research2/SolidityGuard.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.claude/skills/solidity-guard/skills/fuzz-generator .claude/skills/fuzz-generator && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
fuzz-generator
GitHub stars
104
Token cost
~763 tokens
SKILL.md length
96 words
Files
1
Skills in repo
7
Repo updated
First seen
Licence
Custom licence

At a glance

Generates Foundry invariant tests and Echidna property-based fuzz tests for Solidity contracts.

  • Works in 5 steps: Purpose → Foundry Invariant Tests → Echidna Properties → …
  • Tasks that involve Fuzzing
  • SKILL.md covers 1. Purpose, 2. Foundry Invariant Tests, 3. Echidna Properties and 4. Common Invariants, plus 1 more section
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Fuzz Generator is an agent skill from alt-research2/SolidityGuard. Generates Foundry invariant tests and Echidna property-based fuzz tests for Solidity contracts. Creates handler contracts, invariant assertions, and fuzzing configurations.

Its SKILL.md is about 760 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Backend & APIs, covering Fuzzing and Smart contracts. It works with Solidity. The repository describes itself as: Solidity/EVM smart contract security auditor — 104 vulnerability patterns, 8 tools, 100% CTF + EVMBench benchmark (120/120).

When your agent uses it

  • Tasks that involve Fuzzing
  • Tasks that involve Smart contracts

Example prompts

  • “Use the fuzz-generator skill to generate Foundry invariant tests and Echidna property-based fuzz tests for Solidity contracts”
  • “/fuzz-generator”

Requirements

  • Pre-approved tools (allowed-tools): Read, Grep, Glob, Write, Bash

Workflow steps

5 steps, taken from the step headings in SKILL.md.

  1. Purpose
  2. Foundry Invariant Tests
  3. Echidna Properties
  4. Common Invariants
  5. Running

What it can do on your machine

Read from SKILL.md and the folder at commit 35645e8. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Grep
    • Glob
    • Write
    • Bash

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md (its code samples are solidity, yaml and bash).

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Fuzz Generator loads about 763 tokens when it runs. Until then it costs about 47 tokens; SKILL.md has 96 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~47
When it runs · the whole SKILL.md, loaded when a task matches
~763

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NotePre-approves every shell command (allowed-tools: Bash)SKILL.md
    allowed-tools: Read, Grep, Glob, Write, Bash

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 96 words (~763 tokens).

“Generate comprehensive fuzz tests using Foundry and Echidna. Fuzz testing finds edge cases and invariant violations that manual review and static analysis miss.”

— opening of SKILL.md by alt-research2, Custom licence
name
fuzz-generator
allowed-tools
Read, Grep, Glob, Write, Bash

Read the full SKILL.md on GitHub

Files

Just SKILL.md in .claude/skills/solidity-guard/skills/fuzz-generator of alt-research2/SolidityGuard.

Open the folder on GitHubat commit 35645e8

Compare with similar skills

Fuzz Generator next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Fuzz Generator compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Fuzz Generator this skillalt-research2/SolidityGuard104—~763Automated safety check: NotesCustom licence
Fizz Convertpashov/skills1.2k2 repos~3.7kAutomated safety check: PassMIT
Stateful Invariant Testingaviggiano/security144—~2.8kAutomated safety check: PassMIT
Property Based Testingtrailofbits/skills7.4k—~1.1kAutomated safety check: PassCC-BY-SA-4.0
Fizzpashov/skills1.2k2 repos~11kAutomated safety check: PassMIT
Fuzzing Patternsccashwell/evm-cortex131—~1.6kAutomated safety check: PassMIT

Similar skills

  • Fizz Convert

    pashov/skills

    Convert English-language properties in PROPERTIES.md (produced by the Fizz skill) into Solidity assertions inside the existing fuzz harness, then flip their checkboxes.

    1.2k GitHub starsUsed in 2 repos~3.7k tokens
    Backend & APIsAuto-check passed
  • Stateful Invariant Testing

    aviggiano/security

    Build metric-driven Chimera/create-chimera-app stateful invariant testing campaigns for Solidity projects.

    144 GitHub stars~2.8k tokensUpdated 22 days ago
    SecurityAuto-check passed
  • Property Based Testing

    trailofbits/skills

    Official

    Writes, reviews, and debugs property-based tests — Hypothesis, fast-check, proptest, jqwik, rapid, and Echidna or Medusa for Solidity invariants.

    7.4k GitHub stars~1.1k tokensUpdated today
    SecurityAuto-check passed
  • Fizz

    pashov/skills

    Generate Echidna/Medusa-compatible Solidity fuzz suites from Foundry or Hardhat projects.

    1.2k GitHub starsUsed in 2 repos~11k tokens
    SecurityAuto-check passed
  • Fuzzing Patterns

    ccashwell/evm-cortex

    A skill your agent uses when writing fuzz tests for Solidity contracts.

    131 GitHub stars~1.6k tokensUpdated 8 days ago
    SecurityAuto-check passed
  • Smart Contract Audit

    greatpie/smart-contract-audit-skill

    Script-backed, out-of-box auditing workflow for Solidity/EVM repositories based on EVMbench detect/patch/exploit methodology.

    101 GitHub stars~1.1k tokensUpdated 7 mo ago
    Backend & APIsAuto-check passed

More from alt-research2/SolidityGuard

  • Storage Analyzer

    alt-research2/SolidityGuard

    Analyzes storage layout, proxy patterns, and state variable security in Solidity contracts.

    104 GitHub stars~1.3k tokensUpdated 3 mo ago
    Auto-check: notes
  • Entry Point Analyzer

    alt-research2/SolidityGuard

    Analyzes Solidity contract entry points to map attack surface.

    104 GitHub stars~959 tokensUpdated 3 mo ago
    Auto-check passed
  • Reentrancy Auditor

    alt-research2/SolidityGuard

    Deep reentrancy vulnerability analysis for Solidity contracts.

    104 GitHub stars~1.8k tokensUpdated 3 mo ago
    Auto-check passed
  • Report Generator

    alt-research2/SolidityGuard

    Generates professional security audit reports from findings.

    104 GitHub stars~1k tokensUpdated 3 mo ago
    Auto-check passed
  • Solidity Vulnerability Scanner

    alt-research2/SolidityGuard

    Comprehensive Solidity contract security scanner detecting 104 vulnerability patterns across reentrancy, access control, arithmetic, DeFi, proxy, and token categories.

    104 GitHub stars~1.6k tokensUpdated 3 mo ago
    Auto-check: notes
  • Spec Compliance

    alt-research2/SolidityGuard

    Validates Solidity implementation against specification documents.

    104 GitHub stars~503 tokensUpdated 3 mo ago
    Auto-check passed

Works with

Questions about Fuzz Generator

What does Fuzz Generator do?

Generates Foundry invariant tests and Echidna property-based fuzz tests for Solidity contracts. Fuzz Generator is an agent skill from alt-research2/SolidityGuard. Generates Foundry invariant tests and Echidna property-based fuzz tests for Solidity contracts.

When should I use Fuzz Generator?

Fuzz Generator fits situations like: tasks that involve Fuzzing; tasks that involve Smart contracts.

How do I install Fuzz Generator in Claude Code?

Run `npx skills add alt-research2/SolidityGuard --skill fuzz-generator -a claude-code`. Or copy the skill folder (.claude/skills/solidity-guard/skills/fuzz-generator in alt-research2/SolidityGuard) into .claude/skills/fuzz-generator in your project. Claude Code loads it when a task matches its description.

How do I install Fuzz Generator in Codex?

Run `npx skills add alt-research2/SolidityGuard --skill fuzz-generator -a codex`. Or copy the skill folder (.claude/skills/solidity-guard/skills/fuzz-generator in alt-research2/SolidityGuard) into .agents/skills/fuzz-generator in your project. Codex loads it when a task matches its description.

Can I use Fuzz Generator in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add alt-research2/SolidityGuard --skill fuzz-generator -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/fuzz-generator, .gemini/skills/fuzz-generator, .github/skills/fuzz-generator and .opencode/skills/fuzz-generator in your project.

What does Fuzz Generator need to run?

SKILL.md names no scripts, command-line tools or credentials: Fuzz Generator is instructions for the agent only. Its frontmatter pre-approves these tools: Read, Grep, Glob, Write, Bash.

Does Fuzz Generator access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Fuzz Generator safe to install?

Our automated static check of SKILL.md found notes only (pre-approves every shell command (allowed-tools: bash)), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.

What licence does Fuzz Generator use?

Fuzz Generator has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does Fuzz Generator use?

About 763 tokens (SKILL.md is roughly 3.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Fuzz Generator?

Skills that share tags, products or a category with Fuzz Generator: Fizz Convert (pashov/skills, 1.2k stars), Stateful Invariant Testing (aviggiano/security, 144 stars), Property Based Testing (trailofbits/skills, 7.4k stars) and Fizz (pashov/skills, 1.2k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Fuzz Generator?

alt-research2 (a GitHub organization) maintains it in alt-research2/SolidityGuard, which has 104 GitHub stars. The repository holds 7 skills in this directory. The repository was last updated on June 12, 2026.

Source: alt-research2/SolidityGuard on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.