Sato Hub
← Skills

sharp-edgesskills.sh · trailofbits

6,640 installs

"Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating whether code follows 'secure by default' and 'pit of success' principles. Triggers: footgun, misuse-resistant, secure defaults, API usability, dangerous configuration."

Executes fetched or decoded code
Hosts contacted: apache.orgxml.orgevil.com
Evidence lines
  • executes_fetched_code — references/lang-javascript.md: ## eval and Dynamic Code
  • executes_fetched_code — references/lang-javascript.md: // DANGEROUS: eval executes arbitrary code
  • executes_fetched_code — references/lang-javascript.md: eval(userInput);
  • executes_fetched_code — references/lang-javascript.md: eval(`\`${template}\``);
  • executes_fetched_code — references/lang-javascript.md: | `eval(`, `Function(`, `setTimeout(string` | Code execution |

Our disclosure is a static description of what the skill declares and does; it is not a safety verdict. Source record: www.skills.sh/trailofbits/skills/sharp-edges. Targets trailofbits-skills.

Install

npx skills add trailofbits/skills@sharp-edges

Copied from the registry's documented install form. Read the disclosure above first; it is the whole point of this page.

Observed record

First seen 2026-10-19. The weekly re-scan will record install growth and any change to the skill's content hash; one observation so far.

Cite this page

Sato Hub. "sharp-edges — skill disclosure on Sato Hub." Sato Hub, updated 2026-10-23, accessed 2026-10-23. https://satohub.ai/skills/skillssh%3Atrailofbits%2Fskills%2Fsharp-edges

Data last refreshed 2026-10-23; this page is rebuilt daily. Citations carry the date so a reader can tell which snapshot a claim came from. Catalog data is licensed CC-BY-4.0.