Does this skill replace a professional security audit?

No, it is a maturity assessment tool designed to identify gaps and prepare projects for audits. It should be used to improve internal standards but does not replace a manual audit by security professionals.

What kind of report does the skill generate?

It produces a detailed maturity report including an executive summary, a scorecard table, evidence-based analysis for every category, and a priority-ordered improvement roadmap with effort estimates.

What framework does this skill use for assessments?

The skill utilizes the Trail of Bits 'Building Secure Contracts' Code Maturity Evaluation framework (v0.1.0), which covers nine specific categories of software health.

What are the 9 categories analyzed by the assessor?

The assessment covers Arithmetic, Auditing, Access Controls, Complexity Management, Decentralization, Documentation, Transaction Ordering (MEV), Low-level Manipulation, and Testing & Verification.

How long does a full code maturity assessment take?

A thorough assessment typically takes between 30 to 40 minutes, as it requires the AI to explore the codebase, collect evidence, and interact with the user to verify manual processes.

Code Maturity Assessor

Name: Code Maturity Assessor
Author: monmacllcapp

bymonmacllcapp

0•

安全与测试

Evaluates codebase security and maturity using the Trail of Bits framework to provide evidence-based ratings and prioritized improvement roadmaps.

The Code Maturity Assessor is a specialized skill that implements the industry-standard Trail of Bits 'Building Secure Contracts' framework to systematically evaluate codebases across nine critical dimensions, including arithmetic safety, access controls, and decentralization. By performing deep-dive discovery and pattern analysis, it identifies structural weaknesses and security gaps that might be missed during standard linting. It delivers a professional maturity scorecard ranging from 'Missing' to 'Strong,' backed by specific file references and a priority-ordered roadmap, making it an essential tool for teams preparing for formal audits or establishing high-governance engineering standards.

主要功能

01Evidence-based scoring system (0-4) with mandatory file and line references

02Comprehensive report generation including executive summaries and effort estimates

03Interactive analysis mode for verifying off-chain processes and governance patterns

04Systematic assessment across 9 categories including Arithmetic, MEV, and Decentralization

050 GitHub stars

06Automated discovery of project architecture, test coverage, and documentation quality

使用场景

01Preparing a smart contract or high-stakes codebase for a formal third-party security audit

02Establishing internal engineering benchmarks and governance for decentralized protocols

03Performing periodic security health checks on complex systems to identify architectural drift

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add monmacllcapp/skill-forks code-maturity-assessor

For use in Claude.ai and ChatGPT

Download Skill