Zum Hauptinhalt springen
Dieser Inhalt ist noch nicht in Ihrer Sprache verfügbar und wird auf Englisch angezeigt.

Sharp Edges

Plugin Aktiv
Teil von:Trailofbits

Identify error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes

1 Skill 0 MCPs
Zweck

To help developers and security professionals proactively identify and fix security mistakes introduced by confusing or insecure API designs and configurations.

Funktionen

  • Identifies security-prone API designs
  • Analyzes dangerous configuration schemas
  • Evaluates cryptographic library ergonomics
  • Assesses authentication/authorization APIs
  • Provides an autonomous analysis agent

Anwendungsfälle

  • Reviewing API designs for security
  • Auditing configuration schemas
  • Evaluating cryptographic library usability
  • Assessing authentication interfaces

Nicht-Ziele

  • Finding general implementation bugs
  • Analyzing business logic flaws
  • Performing performance optimizations

Trust

  • warning:Issues Attention13 issues opened and 4 closed in the last 90 days, indicating a closure rate below 50% and a significant number of open issues.

Installation

Zuerst Marketplace hinzufügen

/plugin marketplace add trailofbits/skills
/plugin install sharp-edges@trailofbits

Enthält 1 Erweiterungen

Skill (1)

Sharp Edges Skill

Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating whether code follows 'secure by default' and 'pit of success' principles. Triggers: footgun, misuse-resistant, secure defaults, API usability, dangerous configuration.

95

Qualitätspunktzahl

75 /100
Analysiert about 23 hours ago

Vertrauenssignale

Letzter Commit3 days ago
GitHub-Inhaber trailofbits (opens in new tab)
Sterne5.2k
LizenzCC-BY-SA-4.0
Status
Quellcode ansehen

Ähnliche Erweiterungen

Dotforge Stack Python Fastapi

100

Python 3.12+ with FastAPI, async/await, type hints, and Ruff linting rules for Claude Code.

Plugin
luiseiman

Dotforge

100

Node.js 20+ with Express/Fastify, TypeScript, and ESM module rules for Claude Code.

Plugin
luiseiman

Context7 Plugin

100

Upstash Context7 MCP-Server für die Abfrage aktueller Dokumentationen. Ruft versionsspezifische Dokumentationen und Codebeispiele direkt aus Quell-Repositories in den LLM-Kontext.

Plugin
upstash

Review Agent Governance

99

Require a human approval signal before an AI agent can post PR reviews, comments, merges, or writes to CI config. Cedar-gated, receipt-signed, designed for the Hermes-style failure mode where a review bot posts without oversight.

Plugin
wshobson

Performance Testing Review

99

Performance analysis, test coverage review, and AI-powered code quality assessment

Plugin
wshobson

Comprehensive Review

99

Multi-perspective code analysis covering architecture, security, and best practices

Plugin
wshobson