What problem does it solve? Security code reviews often miss recurring vulnerability patterns because auditors find one bug without systematically hunting for its variants across the codebase. This Skill provides a structured methodology combining sharp edges detection (dangerous APIs, insecure defaults, footguns) with variant analysis to find every instance of a vulnerability class. ## Core Features & Use Cases - Sharp Edges Detection: Systematic checklists for dangerous defaults, error-prone APIs, cryptographic weaknesses, and language-specific footguns across Python, JavaScript, Rust, C/C++, and Solidity. - Variant Analysis: Extract abstract patterns from confirmed findings (source → transform → sink), then hunt for variants using grep, Semgrep, and CodeQL queries. - Structured Reporting: Templates for variant analysis reports with severity scoring, validation matrices, and remediation guidance. - Use Case: After finding a SQL injection in one endpoint, use the variant hunting workflow to discover four additional injection points across the application, then produce a report with systemic fixes like parameterized query enforcement. ## Quick Start Review this codebase for security vulnerabilities using sharp edges detection and hunt for variants of any findings.
