Overview
code-maturity-assessor is an open-source testing skill for Claude Code and compatible agents, published by trailofbits. Its author describes it as: “Systematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for arithmetic safety, auditing practices, access controls, complexity, decentralization, documentation, MEV risks, low-…”. The project has 6.6k stars on GitHub and is available under the CC-BY-SA-4.0 license. Add it to your setup with `/plugin marketplace add trailofbits/skills`.
What code-maturity-assessor does
Systematically assesses codebase maturity using Trail of Bits' 9-category framework. Provides evidence-based ratings and actionable recommendations.
Best for
What’s inside
The SKILL.md for code-maturity-assessor is organised into these sections:
- Purpose
- How This Works
- Phase 1: Discovery
- Phase 2: Analysis
- Phase 3: Report
- Rating System
- The 9 Categories
- Quick Reference:
- Example Output
- Assessment Process
- Rationalizations (Do Not Skip)
- Report Format
Installation
Add code-maturity-assessor to your agent with:
/plugin marketplace add trailofbits/skillsReview a skill’s source before installing it — skills can instruct your agent to run commands. This command comes from the skill’s public repository, which is the source of truth for setup steps. New to skills? Read how to install Claude Code skills.
Supported agents
- Claude Code — ships a claude code plugin marketplace
License
code-maturity-assessor is published under the CC-BY-SA-4.0 license.
Strengths
- Clear CC-BY-SA-4.0 license — safe to read and adapt within its terms
- Ships in trailofbits/skills, an established project with 6,646 GitHub stars
- Works with Claude Code
- Actively maintained — repository updated in the last 90 days
Author
Topics
Frequently asked questions
- What does code-maturity-assessor do?
- Systematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for arithmetic safety, auditing practices, access controls, complexity, decentralization, documentation, MEV risks, low-level code, and testing. Produces professional scorecard with evidence-based ratings and actionable recommendations.
- How do I install code-maturity-assessor?
- Run /plugin marketplace add trailofbits/skills in your agent, then reload your skills. Review the source at https://github.com/trailofbits/skills before installing.
- Is code-maturity-assessor free to use?
- Yes. code-maturity-assessor is free and open source under the CC-BY-SA-4.0 license, so you can read, run, and adapt it within that license's terms.
- Which agents does code-maturity-assessor work with?
- code-maturity-assessor lists Claude Code — named in its SKILL.md, its plugin marketplace or its repository topics. Skills use the portable SKILL.md format, so other agents that read that format may load it too.
- Where does code-maturity-assessor come from?
- code-maturity-assessor ships inside trailofbits/skills, a repository that contains 41 catalogued skills in total. The repository's 6,646 GitHub stars apply to that whole collection, not to this skill on its own.
