---
title: "Sharp Edges Analysis - Air Market"
description: "Some code is not wrong, it is just easy to use wrongly - a setting that quietly turns off a protection, a function that fails open. This looks over an API, a config format, or a crypto library and po…"
canonical: "https://airmarket.ai/app/sharp-edges"
---

[Air Market](/) / [Security](/category/security) / Sharp Edges Analysis

Skill by [Trail of Bits](/@trailofbits)

# Sharp Edges Analysis

Find the parts of your design that invite people to get it wrong

## What this does

Some code is not wrong, it is just easy to use wrongly - a setting that quietly turns off a protection, a function that fails open. This looks over an API, a config format, or a crypto library and points out where the design leads people into mistakes. Reach for it when you are designing something others will use.

### Top 3 things it does for you

- Review this API for ways it can be misused
- Check whether my defaults are the safe ones
- Look at a config schema for dangerous options

## Information

**Sharp Edges Analysis at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [Trail of Bits](/@trailofbits) |
| Category | [Security](/category/security) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Size | 127 KB |
| Licence | CC-BY-SA-4.0 |
| Repository | [trailofbits/skills](https://github.com/trailofbits/skills/tree/d5fe2e6a7896236c3102fd5477e833623ad70298/plugins/sharp-edges/skills/sharp-edges) |
| GitHub stars | 6,823 (as of Nov 2026) |
| Installs | 7,703, counted by skills.sh (Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of Sharp Edges Analysis and flagged nothing. AIR's verdict: **safe**.

**What Sharp Edges Analysis's check was run against**

|  |  |
| --- | --- |
| Commit | d5fe2e6a7896236c3102fd5477e833623ad70298 |
| Content hash | c6e2a3b7f87e2bce81853dff70cdb63788c5ee17805254d2fd136c3849f729d4 |
| Files read | [Browse the files at this exact commit](https://github.com/trailofbits/skills/blob/d5fe2e6a7896236c3102fd5477e833623ad70298/plugins/sharp-edges/skills/sharp-edges/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for Sharp Edges Analysis](/security/sharp-edges)

## About Sharp Edges Analysis

This looks for error-prone APIs, dangerous configurations, and footgun designs - the shapes that make security mistakes likely even for careful users.

Use it when reviewing API designs, configuration schemas, or the ergonomics of a cryptographic library, and when you want to judge whether code actually follows 'secure by default' and 'pit of success' principles.

## What's inside

- SKILL.md - instructions
- agents/openai.yaml - data
- assets/trail-of-bits-mark.svg - template
- references/auth-patterns.md - reference
- references/case-studies.md - reference
- references/config-patterns.md - reference
- references/crypto-apis.md - reference
- references/lang-c.md - reference
- references/lang-csharp.md - reference
- references/lang-go.md - reference
- references/lang-java.md - reference
- references/lang-javascript.md - reference
- references/lang-kotlin.md - reference
- references/lang-php.md - reference
- references/lang-python.md - reference
- references/lang-ruby.md - reference
- references/lang-rust.md - reference
- references/lang-swift.md - reference
- references/language-specific.md - reference

## Questions

### Is Sharp Edges Analysis safe to install?

AIR scanned this exact version of Sharp Edges Analysis and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit d5fe2e6a7896, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/sharp-edges.

### How do I install Sharp Edges Analysis?

Open https://airmarket.ai/app/sharp-edges on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/trailofbits/skills/tree/d5fe2e6a7896236c3102fd5477e833623ad70298/plugins/sharp-edges/skills/sharp-edges. Install from that link, not the branch.

## Related on Air Market

- [More Security listings](/category/security)
- [Everything by Trail of Bits](/@trailofbits)

---

Canonical URL: <https://airmarket.ai/app/sharp-edges>