Sharp Edges

Plugin Active

Identify error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes

1 Skill 0 MCPs

Purpose

To help developers and security professionals proactively identify and fix security mistakes introduced by confusing or insecure API designs and configurations.

Features

Identifies security-prone API designs
Analyzes dangerous configuration schemas
Evaluates cryptographic library ergonomics
Assesses authentication/authorization APIs
Provides an autonomous analysis agent

Use Cases

Reviewing API designs for security
Auditing configuration schemas
Evaluating cryptographic library usability
Assessing authentication interfaces

Non-Goals

Finding general implementation bugs
Analyzing business logic flaws
Performing performance optimizations

Trust

warning:Issues Attention13 issues opened and 4 closed in the last 90 days, indicating a closure rate below 50% and a significant number of open issues.

Installation

First, add the marketplace

/plugin marketplace add trailofbits/skills

/plugin install sharp-edges@trailofbits

Contains 1 extensions

Skill (1)

Sharp Edges Skill

Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating whether code follows 'secure by default' and 'pit of success' principles. Triggers: footgun, misuse-resistant, secure defaults, API usability, dangerous configuration.

Quality Score

75 /100

Analyzed about 12 hours ago

Trust Signals

Last commit3 days ago

GitHub owner trailofbits

Stars5.2k

LicenseCC-BY-SA-4.0

Status

View Source

Similar Extensions

Dotforge Stack Python Fastapi

100

Python 3.12+ with FastAPI, async/await, type hints, and Ruff linting rules for Claude Code.

Plugin

luiseiman

Dotforge

100

Node.js 20+ with Express/Fastify, TypeScript, and ESM module rules for Claude Code.

Plugin

luiseiman

Context7 Plugin

100

Upstash Context7 MCP server for up-to-date documentation lookup. Pull version-specific documentation and code examples directly from source repositories into your LLM context.

Plugin

upstash

Review Agent Governance

Require a human approval signal before an AI agent can post PR reviews, comments, merges, or writes to CI config. Cedar-gated, receipt-signed, designed for the Hermes-style failure mode where a review bot posts without oversight.

Plugin

wshobson

Performance Testing Review

Performance analysis, test coverage review, and AI-powered code quality assessment

Plugin

wshobson

Comprehensive Review

Multi-perspective code analysis covering architecture, security, and best practices

Plugin

wshobson