sharp-edges

Analyze software designs for error-prone APIs and dangerous configurations.

Updated Feb 13, 2026
One-click install
npx skills add https://github.com/fjor1025/InfoSec-Framework --skill sharp-edges-fjor1025
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sharp-edges
Source: https://github.com/fjor1025/InfoSec-Framework/tree/main/ClaudeSkills/plugins/sharp-edges/skills/sharp-edges
Command: npx skills add https://github.com/fjor1025/InfoSec-Framework --skill sharp-edges-fjor1025

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps you proactively identify and mitigate security risks introduced by poorly designed APIs, dangerous default configurations, and error-prone interfaces that can lead to developer misuse and vulnerabilities.

Core Features & Use Cases

  • Footgun Detection: Pinpoints APIs where the "easy path" leads to insecurity.
  • Secure Defaults Analysis: Evaluates if default settings are secure and if insecure options are easily selectable.
  • Use Case: Reviewing a new authentication library to ensure that common mistakes like algorithm confusion or weak default settings are impossible or clearly flagged.

Quick Start

Use the sharp-edges skill to analyze the provided API design for potential misuse-resistant issues.

Frequently Asked Questions about sharp-edges

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify API security footguns in my software design?

API security footguns are identified by analyzing API parameters, default values, and error handling paths to pinpoint where the easy path leads to insecurity. This process detects misuse-resistant design flaws and dangerous configurations.

What are secure defaults analysis and why do I need it for my configuration schema?

Secure defaults analysis evaluates if default settings in a configuration schema are secure and if insecure options are easily selectable. You need it to ensure secure usage is the path of least resistance, preventing developer misuse.

How can I review an authentication library for algorithm confusion and weak defaults?

You review an authentication library by examining its API parameters and error handling paths to ensure common mistakes like algorithm confusion or weak default settings are impossible or clearly flagged.

Does this footgun analysis work for cryptographic library ergonomics?

Yes, footgun analysis works for cryptographic library ergonomics by carefully examining API parameters and error handling paths to identify misuse-resistant patterns and API usability flaws.

When should I analyze my API for misuse-resistant patterns?

You should analyze your API for misuse-resistant patterns when reviewing new software designs to proactively identify and mitigate security risks introduced by poorly designed APIs and error-prone interfaces.

What is the pit of success in secure API design?

The pit of success in secure API design means ensuring secure usage is the path of least resistance. It involves identifying misuse-resistant patterns and fixing API usability flaws so developers cannot easily make security mistakes.