Skip to skills
AI Craft Pad
Home/Skills/Development/sharp-edges
First-party source

Sharp Edges

Explore sharp edges as a development workflow from trailofbits/skills. Compare its source, maintenance and review signals before choosing it for your agent.

What it does

This source provides a task-specific instruction workflow for Development. Its source file is linked below so you can inspect the exact procedure, tools and dependencies. A full editorial review has not been completed.

Best for

Exploring Development workflows with an agent. Confirm that the source matches your task and environment.

Tradeoffs and requirements

The automated catalog record does not establish task performance or runtime safety. Check supporting scripts and external services in the source before use.

Unknown; inspect source requirements and supporting scripts.

Install from the source

First time installing a skill? Follow the walkthrough →

Inspect the pinned source snapshot and its supporting files first. The command selects this skill through the open-source skills CLI. Node.js and agent-specific setup may be required. Installation can download code. Catalog ingestion never executes skill instructions or install scripts.

npx skills add https://github.com/trailofbits/skills/tree/2be6433b39e009cd2b6fd3be1895f6b1faa5af9a/plugins/sharp-edges/skills/sharp-edges --skill sharp-edges

Review pinned skill folder ↗ · CLI documentation ↗

After source review, use npx skills check and npx skills update to inspect and apply upstream updates. Re-check changed instructions before running them.

Safety & review signals

Static review only. This is not a security audit or a guarantee of safety.

SKILL.md text only; scripts, dependencies and runtime behavior not audited.

No configured text patterns matched. Unmatched or concealed behavior can still exist.

Allowed tools declaration: Read Grep Glob. Runtime permissions and network behavior: Unknown.

AI Craft Pad Skill Score

86/100 · Metadata coverage 100% · Model 1.0

Scores summarize observable discovery signals. Popularity and repository activity apply to the whole repository. Unknown runtime safety earns no certification.

Documentation
100/100
100
Maintenance
100/100
100
License Clarity
100/100
100
Repository Health
100/100
100
Compatibility Evidence
80/100
80
Popularity
70/100
70
Originality
80/100
80
Static Safety
60/100
60
Read the formula and limits →

Similar skills to compare

Related by category; compare scope and dependencies before choosing an alternative.

Development88/100

systematic debugging

obra/superpowers

A structured investigation workflow for a failing build, unexpected application behavior or a regression that keeps returning.

Community sourceMITEditorial review

Repository star change: +698 over 26.7 hours. 2026-11-01

310,209 repo stars1 text flagReview ↗
Development87/100

huggingface gradio

huggingface/skills

A Python UI reference for Gradio interfaces, component layouts, event handlers and interactive model demonstrations.

First-party sourceApache-2.0Editorial review

Repository star change: +2 over 26.7 hours. 2026-11-01

11,243 repo stars2 text flagsReview ↗
Development86/100

web artifacts builder

anthropics/skills

A project scaffold and bundling workflow for complex React-based HTML artifacts.

First-party sourceComplete terms in LICENSE.txtEditorial review

Repository star change: +586 over 26.7 hours. 2026-11-01

186,004 repo stars2 text flagsReview ↗

More from this source

Security86/100

differential review

trailofbits/skills

A security-focused change review that connects a diff with history, affected callers, test coverage and explicit findings.

First-party sourceCC-BY-SA-4.0Editorial review

Repository star change: +26 over 26.7 hours. 2026-11-01

7,925 repo stars0 text flagsReview ↗
Testing & QA86/100

property based testing

trailofbits/skills

A testing guide for meaningful invariants, generated input domains and interpreting minimized counterexamples.

First-party sourceCC-BY-SA-4.0Editorial review

Repository star change: +26 over 26.7 hours. 2026-11-01

7,925 repo stars0 text flagsReview ↗
Security86/100

supply chain risk auditor

trailofbits/skills

A dependency-risk workflow examining resolved versions, advisories, upstream maintenance, publisher concentration and install-time scripts.

First-party sourceCC-BY-SA-4.0Editorial review

Repository star change: +26 over 26.7 hours. 2026-11-01

7,925 repo stars0 text flagsReview ↗

Related Plugins

Category-based discovery candidates. Inspect overlap, permissions and requirements; these combinations have not been integration-tested.

Development76/100

superpowers

obra/superpowers · Plugin

A multi-format plugin bundle that organizes planning, testing and implementation through reusable development skills and startup guidance.

Manifest metadataMITEditorial review
310,320 repo stars2 metadata flagsReview ↗
Development75/100

code review

anthropics/claude-plugins-official · Plugin

A Claude Code review workflow for pull-request changes, with source references and separate local feedback and optional publication steps.

Manifest metadataApache-2.0Editorial review
45,633 repo stars0 metadata flagsReview ↗
Development75/100

context7

anthropics/claude-plugins-official · Plugin

A Claude Code package for connecting Context7's hosted documentation lookup, useful when library versions matter to a coding task.

Manifest metadataApache-2.0Editorial review
45,633 repo stars2 metadata flagsReview ↗

Related MCP Servers

Category-based discovery candidates. Inspect overlap, permissions and requirements; these combinations have not been integration-tested.

Development73/100

freellmpool

0xzr/freellmpool · MCP server

Explore freellmpool as an MCP connection for development. Compare the declared transport, package requirements and source evidence before connecting an agent.

Registry metadataMIT
142 repo stars1 metadata flagReview ↗
Development72/100

agents party

1gr14/agents-party · MCP server

Explore agents-party as an MCP connection for development. Compare the declared transport, package requirements and source evidence before connecting an agent.

Registry metadataMIT
12 repo stars1 metadata flagReview ↗
Development62/100

substack ops

06ketan/substack-ops · MCP server

Explore substack-ops as an MCP connection for development. Compare the declared transport, package requirements and source evidence before connecting an agent.

Registry metadataMIT
1 repo stars2 metadata flagsReview ↗

Continue your task with AI Craft Pad

Optional resources from our own site. These links do not affect the Skill Score or editorial selection.

Free tool

Inspect skill files →

Review text and supporting files for patterns needing manual inspection. No safety certification is implied.