What problem does it solve? APIs and configurations often make insecure usage the path of least resistance, letting developers accidentally introduce vulnerabilities like algorithm downgrade attacks, timing leaks, and authentication bypasses. This Skill systematically audits code for these footguns before they ship to production. ## Core Features & Use Cases - Footgun Detection: Identifies six categories of sharp edges including algorithm/mode selection, dangerous defaults, primitive vs. semantic APIs, configuration cliffs, silent failures, and stringly-typed security. - Multi-Language Reference Guides: Provides language-specific footgun patterns for C/C++, Go, Rust, Java, Kotlin, C#, PHP, JavaScript/TypeScript, Python, Ruby, and Swift. - Real-World Case Studies: Documents actual vulnerabilities in GMP, OpenSSL, pickle, YAML, and PHP strcmp to ground analysis in proven attack patterns. - Use Case: When reviewing a new authentication library, use this Skill to probe zero/empty/null edge cases, verify defaults are secure, and check whether developers can accidentally select weak algorithms like MD5 or disable signature verification. ## Quick Start Review the authentication and configuration code in this repository for sharp edges and misuse-prone API designs.
