Identifies security footguns and error-prone API designs to ensure software is secure by default.
Sharp Edges is a specialized security auditing skill designed to evaluate whether software interfaces, cryptographic libraries, and configuration schemas are resistant to developer misuse. It moves beyond standard bug hunting to identify 'sharp edges'—architectural designs where the easiest path for a developer is an insecure one. By surfacing dangerous defaults, algorithm selection footguns, and silent failure modes, this skill helps engineering teams implement 'secure by default' principles and build systems where the 'pit of success' is the only path forward.
Key Features
01Audits for stringly-typed security values that enable injection
02Identifies algorithm and mode selection footguns in security APIs
03Evaluates API ergonomics against misuse-resistance principles
04937 GitHub stars
05Detects dangerous configuration defaults and unvalidated parameters
06Surfaces silent failure patterns where security checks are bypassed
Use Cases
01Evaluating cryptographic integrations for common implementation pitfalls and type confusion
02Reviewing new library or API designs for security usability before release
03Auditing legacy configuration schemas for hidden security risks and dangerous flags
