Skip to main content
affpapa.org
RU EN
skill CX Codex

code-maturity-assessor — Claude Code skill for code assessment

This skill evaluates smart contracts and blockchain code across nine maturity categories. It produces evidence-backed ratings and a ranked improvement plan.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓ 
npx skills add trailofbits/skills --skill code-maturity-assessor -a claude-code
Open on GitHub

What code-maturity-assessor does

The skill inspects project structure, contract or module files, tests, and documentation. It then reviews arithmetic, auditing, access controls, complexity, decentralization, documentation, transaction-ordering risks, low-level code, and testing. For each category, it gathers file references and asks about processes that cannot be assessed from code alone.

The report contains an executive summary, ratings for all categories, evidence-based analysis, and a priority-ordered roadmap. Ratings range from Missing to Strong and depend on how the criteria are met. Claims without references to code are unsubstantiated, so the assessment collects concrete evidence as it proceeds.

What it helps with

  • rate smart contract maturity against a defined framework
  • spot gaps in testing and access controls
  • collect code evidence across nine assessment categories
  • rank improvements for a blockchain codebase

Example prompts for the agent

  • Assess this project's smart contract maturity across every category and produce a scorecard.
  • Review access controls and transaction-ordering risks, with file references.
  • Rate the testing practices and create a prioritized improvement roadmap.

How to install code-maturity-assessor

1Skills CLI (Vercel)

npx skills add trailofbits/skills --skill code-maturity-assessor -a claude-code

2Manually: put the files in place

~/.claude/skills/code-maturity-assessor/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/code-maturity-assessor/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about code-maturity-assessor

How do I install code-maturity-assessor in Claude Code?

Run npx skills add trailofbits/skills --skill code-maturity-assessor -a claude-code. The skill file is located at ~/.claude/skills/code-maturity-assessor/SKILL.md.

What does code-maturity-assessor do?

It evaluates smart contracts and blockchain code across nine categories, gathers supporting evidence from project files, and produces ratings with an improvement roadmap.

Which areas does the skill assess?

It covers arithmetic safety, auditing, access controls, complexity, and decentralization, as well as documentation, transaction-ordering risks, low-level code, and testing.

Similar skills

All skills for Security →
git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. CX Codex +1 54,800installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. CX Codex +1 70,200installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

From the same set77

modern-python Configures Python projects with a modern tooling stack: uv for dependency management, ruff for linting and formatting, ty for type checking. Use when starting new projects, writing scripts, or migrating from legacy tools. CX Codex +1 8,700installs codeql Runs interprocedural taint tracking and data flow analysis using CodeQL. Helps detect security flaws across nine programming languages. CX Codex +1 8,300installs supply-chain-risk-auditor Audits project dependencies for supply-chain risks, including advisories and signs of abandoned packages. Use it before a dependency review or security engagement. CX Codex +1 8,100installs secure-workflow-guide Guides smart contracts through Trail of Bits' 5-step security audit on check-in or before deployment. It runs static analysis, generates visual charts, and prepares fuzzing tests. CX Codex +1 7,400installs property-based-testing This skill helps create and inspect tests that check rules across generated inputs. Use it for parsers, serialization pairs, data structures, and Solidity contract invariants. CX Codex +1 7,000installs fp-check Walks a suspected vulnerability through verification and returns a TRUE POSITIVE or FALSE POSITIVE verdict backed by evidence. Built for confirming findings, not hunting new ones. CX Codex +1 7,000installs sharp-edges Audits API designs and configuration schemas for developer footguns. Flags dangerous defaults and fragile interfaces where the easiest path causes security vulnerabilities. CX Codex +1 6,900installs audit-context-building Maps assumptions, guarantees, and call chains in unfamiliar source code before vulnerability hunting starts. Useful for audits and threat modeling. CX Codex +1 6,800installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor