code-maturity-assessor

Name: code-maturity-assessor
Availability: InStock
Author: Superlend

Assess Solidity codebases across Trail of Bits' 9-category maturity framework.

Updated Jul 10, 2025

Search Tags:#audit #reporting #governance #risk-assessment #analyze #smart-contract #code-maturity

Ready to run

npx skills add https://github.com/Superlend/superloop-core-contracts --skill code-maturity-assessor

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: code-maturity-assessor
Source: https://github.com/Superlend/superloop-core-contracts/tree/main/.cursor/skills/building-secure-contracts/skills/code-maturity-assessor
Command: npx skills add https://github.com/Superlend/superloop-core-contracts --skill code-maturity-assessor

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured, evidence-based assessment of code maturity for smart-contract projects using Trail of Bits' 9-category framework. It identifies gaps in arithmetic safety, auditing practices, access controls, complexity, decentralization, documentation, MEV risk, low-level code, and testing, and delivers a professional scorecard with actionable recommendations.

Core Features & Use Cases

Systematic evaluation across the 9 categories with consistent criteria.
Evidence-backed ratings and actionable improvement roadmap.
Executive summary and full maturity scorecard suitable for audits and governance.
Use Case: Before security reviews or mainnet launches, run the assessment to benchmark maturity and prioritise remediation.

Quick Start

Run the maturity assessor on your codebase to generate a full maturity report. Target a Solidity project with contracts, tests, and documentation. Review the executive summary, scorecard, and prioritized recommendations to guide remediation.

Frequently Asked Questions about code-maturity-assessor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

What is a smart contract code maturity assessment?▼

A smart contract code maturity assessment evaluates a Solidity project across 9 categories like arithmetic, auditing, and testing to generate a structured scorecard with evidence-backed ratings and a prioritized improvement roadmap.

How do I assess my Solidity codebase before a mainnet launch?▼

To assess your Solidity codebase before a mainnet launch, run the maturity evaluation to benchmark safety across 9 categories, generating an executive summary and actionable recommendations to guide remediation.

Can I use this maturity framework for non-Solidity smart contracts?▼

This maturity framework is specifically designed for Solidity smart-contract projects, targeting codebases with contracts, tests, and documentation to ensure accurate evaluation across categories like decentralization and low-level manipulation.

What categories are evaluated in a smart contract maturity report?▼

A smart contract maturity report evaluates 9 categories: arithmetic, auditing, authentication, complexity, decentralization, documentation, transaction ordering risks, low-level manipulation, and testing.

When should I run a code maturity evaluation on my project?▼

You should run a code maturity evaluation before security reviews or mainnet launches to benchmark maturity, identify gaps in access controls or testing, and prioritize remediation actions.

Does the maturity report provide actionable recommendations or just a score?▼

The maturity report provides both an executive scorecard and a prioritized improvement roadmap, delivering evidence-backed ratings and actionable recommendations to guide codebase remediation.