Does this only work for blockchain and smart contracts?

While the framework is optimized for secure contracts, its principles—such as access control, complexity management, and rigorous testing—are highly applicable to any security-critical software system.

Which security framework does this skill use?

It implements the Trail of Bits 9-category framework, which evaluates arithmetic, auditing, access controls, complexity, decentralization, documentation, transaction ordering, low-level code, and testing.

How does the rating system work?

The skill uses a 5-tier logic ranging from Missing (0) to Strong (4). Ratings are determined by meeting specific criteria thresholds for each of the 9 categories.

What is included in the final report?

The report includes an executive summary, a maturity scorecard (0-4 ratings), detailed analysis with code references, and a prioritized roadmap for improvements.

Code Maturity Assessor

Name: Code Maturity Assessor
Author: fjor1025

byfjor1025

0•

Security & Testing

Performs systematic security and maturity audits using the Trail of Bits framework to identify architectural risks and technical debt.

The Code Maturity Assessor provides a rigorous evaluation of your codebase using the industry-standard Trail of Bits 9-category framework. It goes beyond simple linting by analyzing arithmetic safety, access controls, decentralization, and complexity management. By examining your project structure and implementation patterns, it generates a professional-grade maturity scorecard with evidence-based ratings. Whether you are preparing for a formal third-party audit or maintaining a high-integrity system, this skill delivers a prioritized improvement roadmap and actionable insights to harden your software's security posture.

Key Features

010 GitHub stars

02Trail of Bits 9-category framework implementation

03Automated discovery of project structure and test coverage

04Evidence-based scoring with file and line-level references

05Priority-ordered roadmap with impact and effort estimates

06Comprehensive analysis of MEV, arithmetic safety, and access controls

Use Cases

01Pre-audit security readiness for smart contracts and financial applications

02Technical due diligence when evaluating third-party or open-source libraries

03Establishing security baselines during the initial stages of a complex software project

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fjor1025/infosec-framework code-maturity-assessor

For use in Claude.ai and ChatGPT

Download Skill