What it does. AddressSanitizer (ASan) is a widely adopted memory error detection tool used extensively during software testing, particularly fuzzing. It helps detect memory corruption bugs that might otherwise go unnoticed, such as buffer overflows, use-after-free errors, and other memory safety violations.
ASan is a standard practice in fuzzing due to its effectiveness in identifying memory vulnerabilities. It instruments code at compile time to track memory allocations and accesses, detecting illegal operations at runtime.
Highlights
- Fuzzing C/C++ code for memory safety vulnerabilities
- Testing Rust code with unsafe blocks
- Debugging crashes related to memory corruption
- Running unit tests where memory errors are suspected
- Running production code (ASan can reduce security)
When to use it. Builds and runs code under AddressSanitizer to catch buffer overflows, use-after-free, and other memory errors during fuzzing or tests. Covers -fsanitize=address builds, ASAN_OPTIONS, reading the…
Install
npx skills add trailofbits/skills --skill address-sanitizer
Or copy the skill folder manually:
git clone https://github.com/trailofbits/skills.git
cp -r skills/plugins/testing-handbook-skills/skills/address-sanitizer/ ~/.claude/skills/address-sanitizer
Source: trailofbits/skills — 6,948 stars, CC-BY-SA-4.0, last pushed 2026-09-02.
