skills.rest
Superlend
SuperlendOFFICIAL
Explore all skills by this author →
Website𝕏@SuperlendHQGitHub

code-maturity-assessor

Assess Solidity codebases across Trail of Bits' 9-category maturity framework.

Updated Jul 10, 2025
Search Tags:#audit#reporting#governance#risk-assessment#analyze#smart-contract#code-maturity
One-click install
npx skills add https://github.com/Superlend/superloop-core-contracts --skill code-maturity-assessor
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-maturity-assessor
Source: https://github.com/Superlend/superloop-core-contracts/tree/main/.cursor/skills/building-secure-contracts/skills/code-maturity-assessor
Command: npx skills add https://github.com/Superlend/superloop-core-contracts --skill code-maturity-assessor

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured, evidence-based assessment of code maturity for smart-contract projects using Trail of Bits' 9-category framework. It identifies gaps in arithmetic safety, auditing practices, access controls, complexity, decentralization, documentation, MEV risk, low-level code, and testing, and delivers a professional scorecard with actionable recommendations.

Core Features & Use Cases

  • Systematic evaluation across the 9 categories with consistent criteria.
  • Evidence-backed ratings and actionable improvement roadmap.
  • Executive summary and full maturity scorecard suitable for audits and governance.
  • Use Case: Before security reviews or mainnet launches, run the assessment to benchmark maturity and prioritise remediation.

Quick Start

Run the maturity assessor on your codebase to generate a full maturity report. Target a Solidity project with contracts, tests, and documentation. Review the executive summary, scorecard, and prioritized recommendations to guide remediation.

Frequently Asked Questions about code-maturity-assessor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a smart contract code maturity assessment?▼

A smart contract code maturity assessment evaluates a Solidity project across 9 categories like arithmetic, auditing, and testing to generate a structured scorecard with evidence-backed ratings and a prioritized improvement roadmap.

How do I assess my Solidity codebase before a mainnet launch?▼

To assess your Solidity codebase before a mainnet launch, run the maturity evaluation to benchmark safety across 9 categories, generating an executive summary and actionable recommendations to guide remediation.

Can I use this maturity framework for non-Solidity smart contracts?▼

This maturity framework is specifically designed for Solidity smart-contract projects, targeting codebases with contracts, tests, and documentation to ensure accurate evaluation across categories like decentralization and low-level manipulation.

What categories are evaluated in a smart contract maturity report?▼

A smart contract maturity report evaluates 9 categories: arithmetic, auditing, authentication, complexity, decentralization, documentation, transaction ordering risks, low-level manipulation, and testing.

When should I run a code maturity evaluation on my project?▼

You should run a code maturity evaluation before security reviews or mainnet launches to benchmark maturity, identify gaps in access controls or testing, and prioritize remediation actions.

Does the maturity report provide actionable recommendations or just a score?▼

The maturity report provides both an executive scorecard and a prioritized improvement roadmap, delivering evidence-backed ratings and actionable recommendations to guide codebase remediation.

Related Skills

Explore More Software Engineering Skills→
woohyun212woohyun212
21

web3-smart-contract

Audit Solidity smart contracts for ten DeFi vulnerability classes using grep-pattern scans and Foundry PoC templates.

Community
Advanced
hongmaple0820hongmaple0820
9

code-maturity-assessor

Assess code maturity across nine categories and produce a structured scorecard.

Community
Advanced
protoLabsAIprotoLabsAI
2

Blue Team / Defensive Methodology Skill

Automate defensive security assessments, incident response workflows, and purple team coverage analysis.

Official
Advanced
ofelixdevofelixdev

code-maturity-assessor

Assess code maturity across nine categories and generate scored recommendations.

Community
Advanced