[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6FJHXFDM3R5NCMP5G6C0B83":3,"skill-same:01M6FJHXFDM3R5NCMP5G6C0B83":52},{"skillNo":4,"name":5,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":22,"publishedAt":25,"linkOnly":26,"markdownContent":27,"markdownBody":27,"frontMatter":28,"refName":29,"commitSha":30,"skillDirectory":31,"forksCount":32,"repositoryHtmlUrl":33,"repositoryHomepageUrl":34,"ownerHtmlUrl":35,"ownerBlogUrl":6,"ownerDescription":36,"updatedAt":37,"install":38,"resources":51},"01M6FJHXFDM3R5NCMP5G6C0B83","code-maturity-assessor",null,"ComeOnOliver\u002Fskillshub","ComeOnOliver","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F43215937?v=4","01M6E5JNFECJAAVFE0W7SMWWD2","Haoran Shu","01M6E5JNNDQS7AJZDYFQ8TPZCK",67,"MIT","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Ftrailofbits\u002Fskills\u002Fcode-maturity-assessor\u002FSKILL.md",[17],{"categoryNo":18,"categoryName":19,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[23,24],"code","code maturity assessor","2026-11-10 10:12:30",false,"# Code Maturity Assessor\n\n## Purpose\n\nSystematically assesses codebase maturity using Trail of Bits' 9-category framework. Provides evidence-based ratings and actionable recommendations.\n\n**Framework**: Building Secure Contracts - Code Maturity Evaluation v0.1.0\n\n---\n\n## How This Works\n\n### Phase 1: Discovery\nExplores the codebase to understand:\n- Project structure and platform\n- Contract\u002Fmodule files\n- Test coverage\n- Documentation availability\n\n### Phase 2: Analysis\nFor each of 9 categories, I'll:\n- **Search the code** for relevant patterns\n- **Read key files** to assess implementation\n- **Present findings** with file references\n- **Ask clarifying questions** about processes I can't see in code\n- **Determine rating** based on criteria\n\n### Phase 3: Report\nGenerates:\n- Executive summary\n- Maturity scorecard (ratings for all 9 categories)\n- Detailed analysis with evidence\n- Priority-ordered improvement roadmap\n\n---\n\n## Rating System\n\n- **Missing (0)**: Not present\u002Fnot implemented\n- **Weak (1)**: Several significant improvements needed\n- **Moderate (2)**: Adequate, can be improved\n- **Satisfactory (3)**: Above average, minor improvements\n- **Strong (4)**: Exceptional, only small improvements possible\n\n**Rating Logic**:\n- ANY \"Weak\" criteria → **Weak**\n- NO \"Weak\" + SOME \"Moderate\" unmet → **Moderate**\n- ALL \"Moderate\" + SOME \"Satisfactory\" met → **Satisfactory**\n- ALL \"Satisfactory\" + exceptional practices → **Strong**\n\n---\n\n## The 9 Categories\n\nI assess 9 comprehensive categories covering all aspects of code maturity. For detailed criteria, analysis approaches, and rating thresholds, see [ASSESSMENT_CRITERIA.md](resources\u002FASSESSMENT_CRITERIA.md).\n\n### Quick Reference:\n\n**1. ARITHMETIC**\n- Overflow protection mechanisms\n- Precision handling and rounding\n- Formula specifications\n- Edge case testing\n\n**2. AUDITING**\n- Event definitions and coverage\n- Monitoring infrastructure\n- Incident response planning\n\n**3. AUTHENTICATION \u002F ACCESS CONTROLS**\n- Privilege management\n- Role separation\n- Access control testing\n- Key compromise scenarios\n\n**4. COMPLEXITY MANAGEMENT**\n- Function scope and clarity\n- Cyclomatic complexity\n- Inheritance hierarchies\n- Code duplication\n\n**5. DECENTRALIZATION**\n- Centralization risks\n- Upgrade control mechanisms\n- User opt-out paths\n- Timelock\u002Fmultisig patterns\n\n**6. DOCUMENTATION**\n- Specifications and architecture\n- Inline code documentation\n- User stories\n- Domain glossaries\n\n**7. TRANSACTION ORDERING RISKS**\n- MEV vulnerabilities\n- Front-running protections\n- Slippage controls\n- Oracle security\n\n**8. LOW-LEVEL MANIPULATION**\n- Assembly usage\n- Unsafe code sections\n- Low-level calls\n- Justification and testing\n\n**9. TESTING & VERIFICATION**\n- Test coverage\n- Fuzzing and formal verification\n- CI\u002FCD integration\n- Test quality\n\nFor complete assessment criteria including what I'll analyze, what I'll ask you, and detailed rating thresholds (WEAK\u002FMODERATE\u002FSATISFACTORY\u002FSTRONG), see [ASSESSMENT_CRITERIA.md](resources\u002FASSESSMENT_CRITERIA.md).\n\n---\n\n## Example Output\n\nWhen the assessment is complete, you'll receive a comprehensive maturity report including:\n\n- **Executive Summary**: Overall score, top 3 strengths, top 3 gaps, priority recommendations\n- **Maturity Scorecard**: Table with all 9 categories rated with scores and notes\n- **Detailed Analysis**: Category-by-category breakdown with evidence (file:line references)\n- **Improvement Roadmap**: Priority-ordered recommendations (CRITICAL\u002FHIGH\u002FMEDIUM) with effort estimates\n\nFor a complete example assessment report, see [EXAMPLE_REPORT.md](resources\u002FEXAMPLE_REPORT.md).\n\n---\n\n## Assessment Process\n\nWhen invoked, I will:\n\n1. **Explore codebase**\n   - Find contract\u002Fmodule files\n   - Identify test files\n   - Locate documentation\n\n2. **Analyze each category**\n   - Search for relevant code patterns\n   - Read key implementations\n   - Assess against criteria\n   - Collect evidence\n\n3. **Interactive assessment**\n   - Present my findings with file references\n   - Ask about processes I can't see in code\n   - Discuss borderline cases\n   - Determine ratings together\n\n4. **Generate report**\n   - Executive summary\n   - Maturity scorecard table\n   - Detailed category analysis with evidence\n   - Priority-ordered improvement roadmap\n\n---\n\n## Rationalizations (Do Not Skip)\n\n| Rationalization | Why It's Wrong | Required Action |\n|-----------------|----------------|-----------------|\n| \"Found some findings, assessment complete\" | Assessment requires evaluating ALL 9 categories | Complete assessment of all 9 categories with evidence for each |\n| \"I see events, auditing category looks good\" | Events alone don't equal auditing maturity | Check logging comprehensiveness, testing, incident response processes |\n| \"Code looks simple, complexity is low\" | Visual simplicity masks composition complexity | Analyze cyclomatic complexity, dependency depth, state machine transitions |\n| \"Not a DeFi protocol, MEV category doesn't apply\" | MEV extends beyond DeFi (governance, NFTs, games) | Verify with transaction ordering analysis before declaring N\u002FA |\n| \"No assembly found, low-level category is N\u002FA\" | Low-level risks include external calls, delegatecall, inline assembly | Search for all low-level patterns before skipping category |\n| \"This is taking too long\" | Thorough assessment requires time per category | Complete all 9 categories, ask clarifying questions about off-chain processes |\n| \"I can rate this without evidence\" | Ratings without file:line references = unsubstantiated claims | Collect concrete code evidence for every category assessment |\n| \"User will know what to improve\" | Vague guidance = no action | Provide priority-ordered roadmap with specific improvements and effort estimates |\n\n---\n\n## Report Format\n\nFor detailed report structure and templates, see [REPORT_FORMAT.md](resources\u002FREPORT_FORMAT.md).\n\n### Structure:\n\n1. **Executive Summary**\n   - Project name and platform\n   - Overall maturity (average rating)\n   - Top 3 strengths\n   - Top 3 critical gaps\n   - Priority recommendations\n\n2. **Maturity Scorecard**\n   - Table with all 9 categories\n   - Ratings and scores\n   - Key findings notes\n\n3. **Detailed Analysis**\n   - Per-category breakdown\n   - Evidence with file:line references\n   - Gaps and improvement actions\n\n4. **Improvement Roadmap**\n   - CRITICAL (immediate)\n   - HIGH (1-2 months)\n   - MEDIUM (2-4 months)\n   - Effort estimates and impact\n\n---\n\n## Ready to Begin\n\n**Estimated Time**: 30-40 minutes\n\n**I'll need**:\n- Access to full codebase\n- Your knowledge of processes (monitoring, incident response, team practices)\n- Context about the project (DeFi, NFT, infrastructure, etc.)\n\nLet's assess this codebase!\n",{},"main","def8531e65114c0fca8fb8551c1871ee0eed705c","skills\u002Ftrailofbits\u002Fskills\u002Fcode-maturity-assessor",24,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub","https:\u002F\u002Fskillshub.wtf","https:\u002F\u002Fgithub.com\u002FComeOnOliver","AI & Blockchain Engineer\r\n","2026-06-24 22:07:19",{"source":7,"skillName":5,"commands":39,"prompt":49,"zipAvailable":50},[40,43,46],{"tool":41,"command":42},"npx","npx skills add ComeOnOliver\u002Fskillshub --skill code-maturity-assessor",{"tool":44,"command":45},"bunx","bunx skills add ComeOnOliver\u002Fskillshub --skill code-maturity-assessor",{"tool":47,"command":48},"pnpm","pnpm dlx skills add ComeOnOliver\u002Fskillshub --skill code-maturity-assessor","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Ftrailofbits\u002Fskills\u002Fcode-maturity-assessor\u002FSKILL.md",true,[],[53,67,77,86,92,99],{"skillNo":54,"name":55,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":56,"categories":57,"keywords":63,"publishedAt":25},"01M6FKJN13GMG4KY57J3QD8GY5","model-hierarchy-skill","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzscole\u002Fmodel-hierarchy-skill\u002Fmodel-hierarchy-skill\u002FSKILL.md",[58],{"categoryNo":59,"categoryName":60,"taxonomyType":61,"taxonomyTypeDesc":62},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[64,65,66],"model","model hierarchy","model hierarchy skill",{"skillNo":68,"name":69,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":70,"categories":71,"keywords":73,"publishedAt":25},"01M6FKJJJ6GCAMR4PPPRD12M5X","zoom-mcp","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-mcp\u002FSKILL.md",[72],{"categoryNo":59,"categoryName":60,"taxonomyType":61,"taxonomyTypeDesc":62},[74,75,76],"MCP","zoom","zoom mcp",{"skillNo":78,"name":79,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":80,"categories":81,"keywords":82,"publishedAt":25},"01M6FKJE3KYT3KPEZMEEHYKA6K","zoom-apps-sdk","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-apps-sdk\u002FSKILL.md",[],[83,84,85,75],"sdk","zoom apps sdk","apps",{"skillNo":87,"name":88,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":89,"categories":90,"keywords":91,"publishedAt":25},"01M6FKJ9EDH9Q5VWDF8HAJRSP0","windows","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwindows\u002FSKILL.md",[],[88],{"skillNo":93,"name":94,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":95,"categories":96,"keywords":98,"publishedAt":25},"01M6FKJ666BEEFC3AE9GJ72Q93","whiteboard","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwhiteboard\u002FSKILL.md",[97],{"categoryNo":59,"categoryName":60,"taxonomyType":61,"taxonomyTypeDesc":62},[94],{"skillNo":100,"name":101,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":102,"categories":103,"keywords":104,"publishedAt":25},"01M6FKJ21WFCDGTJQ2Q91T9DVW","websockets","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwebsockets\u002FSKILL.md",[],[101]]