GitHub Security Lab shows an LLM agent running AI-driven fuzzing for C/C++ projects

GitHub Security Lab describes the Fuzzing Taskflow, an LLM agent pipeline that identifies entrypoints, writes harnesses, runs AFL++, reads coverage reports, and triages crashes for C/C++ repositories.

The agent makes decisions while MCP tools handle execution, and state is stored in a SQLite database.

The post also warns that the taskflow runs AFL and build commands directly on the host, so it should be used only in disposable environments without elevated privileges.