What is a 'footgun' in software development?

A footgun is a design pattern or feature that makes it very easy for a developer to accidentally create a security vulnerability or a critical bug while trying to perform a standard task.

How does this skill differ from a standard linter?

While linters find syntax errors and style violations, Sharp Edges focuses on architectural design flaws and API ergonomics that lead to human error and security failures over time.

What are 'secure by default' principles?

It means designing systems so the most basic, easiest implementation is automatically the most secure one, requiring explicit, difficult effort to opt-out rather than opt-in to security.

Does this skill help with configuration files?

Absolutely. It analyzes configuration schemas to ensure that missing, zero, or null values don't unintentionally disable security features or create 'configuration cliffs'.

Can I use this for reviewing cryptographic code?

Yes, it is specifically designed to identify common pitfalls in cryptographic APIs, such as algorithm confusion, weak defaults, and improper exposure of low-level primitives.

Sharp Edges Security & API Audit

Name: Sharp Edges Security & API Audit
Author: sudohakan

bysudohakan

•

보안 및 테스팅

Identifies dangerous API designs, insecure defaults, and configuration footguns to ensure code is secure by default.

The Sharp Edges skill helps developers build and review codebases using 'pit of success' principles, where the easiest path for a developer is also the most secure. It specifically scans for error-prone cryptographic APIs, silent failure patterns, dangerous configuration defaults, and 'stringly-typed' security logic that often leads to vulnerabilities. By analyzing how APIs might be misunderstood or misused under pressure, it provides actionable guidance to harden interfaces against both accidental developer error and malicious exploitation.

주요 기능

01Evaluates cryptographic library ergonomics and algorithm selection patterns

02Provides 'Pit of Success' rationales to replace insecure legacy patterns

03Detects 'footgun' API designs that invite developer misuse or security bypasses

04Audits configuration schemas for dangerous defaults and silent failure modes

052 GitHub stars

06Identifies 'stringly-typed' security risks like manual SQL or command concatenation

사용 사례

01Reviewing complex configuration files for hidden security cliffs and invalid combinations

02Evaluating third-party cryptographic integrations for implementation pitfalls

03Pre-deployment security auditing of new API endpoints and library interfaces

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add sudohakan/claude-code-dotfiles sharp-edges

For use in Claude.ai and ChatGPT

주요 기능

01Evaluates cryptographic library ergonomics and algorithm selection patterns

02Provides 'Pit of Success' rationales to replace insecure legacy patterns

03Detects 'footgun' API designs that invite developer misuse or security bypasses

04Audits configuration schemas for dangerous defaults and silent failure modes

052 GitHub stars

06Identifies 'stringly-typed' security risks like manual SQL or command concatenation

사용 사례

01Reviewing complex configuration files for hidden security cliffs and invalid combinations

02Evaluating third-party cryptographic integrations for implementation pitfalls

03Pre-deployment security auditing of new API endpoints and library interfaces

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add sudohakan/claude-code-dotfiles sharp-edges

For use in Claude.ai and ChatGPT