sharp-edges — Claude Code skill: what it does, how to install
Audits API designs and configuration schemas for developer footguns. Flags dangerous defaults and fragile interfaces where the easiest path causes security vulnerabilities.
npx skills add trailofbits/skills --skill sharp-edges -a claude-codeWhat sharp-edges does
The skill targets ergonomic flaws in software interfaces rather than standard coding bugs. It inspects parameters that expose algorithm selection to untrusted input, identifies zero or empty defaults that silently disable checks, and flags functions accepting raw byte arrays instead of semantic types.
Under the hood, the autonomous sharp-edges-analyzer agent inspects code using Read, Grep, and Glob. It proceeds through four stages: surface discovery, edge-case probing, threat modeling, and finding validation.
Sharp edges intentionally skips business logic flaws and performance bottlenecks. It fails as a general-purpose linter because its strict focus is API usability and misuse resistance.
What it helps with
- detect dangerous defaults in configuration schemas
- spot insecure cryptographic algorithm parameters
- evaluate API interfaces for misuse resistance
- uncover silent validation failures in security checks
Example prompts for the agent
- Review our authentication module using sharp-edges to find API footguns
- Run sharp-edges analysis on the configuration schema for dangerous defaults
- Audit this cryptographic helper interface with sharp-edges
How to install sharp-edges
1Skills CLI (Vercel)
npx skills add trailofbits/skills --skill sharp-edges -a claude-code2Manually: put the files in place
~/.claude/skills/sharp-edges/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/sharp-edges/
1Skills CLI (Vercel)
npx skills add trailofbits/skills --skill sharp-edges -a codex2Manually: put the files in place
.agents/skills/sharp-edges/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add trailofbits/skills --skill sharp-edges -a cursor2Manually: put the files in place
.cursor/skills/sharp-edges/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install trailofbits/skills sharp-edges2Manually: put the files in place
.github/skills/sharp-edges/SKILL.md1Skills CLI (Vercel)
npx skills add trailofbits/skills --skill sharp-edges -a gemini-cli2Platform CLI
gemini skills install https://github.com/trailofbits/skills --path plugins/sharp-edges/skills/sharp-edgesManually: put the files in place
.devin/skills/sharp-edges/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add trailofbits/skills --skill sharp-edges -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
From the same set35
The whole set →Similar
Questions about sharp-edges
How do I install sharp-edges in Claude Code?
Run npx skills add trailofbits/skills --skill sharp-edges -a claude-code in your terminal.
What does sharp-edges do?
It evaluates APIs, configuration schemas, and libraries to ensure the secure path is the easiest path for developers. The skill flags designs that easily lead to misconfigurations or signature bypasses.
Can sharp-edges detect business logic bugs?
No, it is not built for business logic or routine code bugs. The analysis focuses entirely on interface ergonomics, dangerous options, and API misuse resistance.
