sharp-edges
Evaluates APIs and configurations for security 'sharp edges' and design flaws that lead to developer misuse.
Install
npx skills add https://github.com/trailofbits/skills --skill sharp-edgesStats
| Total installs | 1,485 |
| Weekly installs | 1.5K |
| GitHub stars | 4.0K |
| First seen | Jan 19, 2026 |
| Source | @trailofbits/skills |
Summary
- Evaluates six categories of sharp edges: algorithm selection footguns, dangerous defaults, primitive vs. semantic APIs, configuration cliffs, silent failures, and stringly-typed security
- Provides a four-phase analysis workflow: surface identification, edge case probing, threat modeling against three adversary types (malicious, lazy, confused), and validation
- Includes severity classification (critical to low) and a quality checklist covering zero/empty/null edge cases, default validation, type confusion, and error paths
- Organized reference guides by cryptographic domain (auth, session, crypto APIs) and programming language (C/C++, Go, Rust, Python, JavaScript, Java, PHP, and others)
Tags
Related skills
| Skill | Installs | vs sharp-edges |
|---|---|---|
| clerk-backend-api | 1,306 | -179 |
| differential-review | 1,584 | +99 |
| okx-dex-trenches | 1,360 | -125 |
| council | 1,523 | +38 |
| assets | 1,304 | -181 |
FAQ
- How many installs does sharp-edges have?
- sharp-edges has 1,485 total installs and 1.5K installs this week.
- Where is sharp-edges hosted?
- sharp-edges is published by @trailofbits/skills at https://github.com/trailofbits/skills.
- How many GitHub stars does sharp-edges have?
- sharp-edges has 4.0K GitHub stars.
- When was sharp-edges first indexed?
- OrangeBot.AI first indexed sharp-edges on Jan 19, 2026.
- How do I install sharp-edges?
- Run: npx skills add https://github.com/trailofbits/skills --skill sharp-edges