GitHub Security Lab

GitHub Security Lab developed the GitHub Security Lab Taskflow Agent to drive autonomous fuzzing for C/C++ projects. The agent identifies project entry points, builds harnesses, runs AFL++, reads coverage, refines harnesses, triages crashes, and generates a vulnerability report—all without human babysitting. The Fuzzing Taskflow is built on top of the Taskflow Agent and uses Claude Sonnet 5 by default. It interprets a repo slug, installs required tools, builds dual‑compiled harnesses (.afl and .cov binaries), iterates with coverage‑driven dictionaries, and stops when coverage plateaus. The workflow is fully container‑less, designed to run in disposable environments like Codespaces. Playwright is an MCP server that enables GitHub Copilot to run automated browser interactions Tangem followed with Aave later that year· Graphiti 生成的实体摘要