Systematic code maturity evaluation across 9 security and engineering categories with evidence-based ratings.
Create detailed user stories, acceptance criteria, and feature specs
Example: Generate user stories for 'password reset feature' with acceptance criteria, edge cases, and test scenarios
Reduce spec writing time by 50%, ensure comprehensive coverage
Research competitors, compare features, identify gaps
Example: Analyze 5 competitor products, create feature comparison matrix, suggest differentiation opportunities
Complete competitive research in 2 hours instead of 2 days
Evaluate features using frameworks (RICE, ICE, Kano) and create prioritized backlogs
Example: Score 20 feature ideas using RICE framework, generate prioritized roadmap with rationale
Make data-driven prioritization decisions faster
Draft PRDs, status updates, and stakeholder presentations
Example: Create executive summary of Q3 roadmap, monthly progress report, feature launch announcement
Save 3-5 hours/week on communication overhead
Submit your Claude Code skill and start earning
epx add trailofbits/skills --skill code-maturity-assessorCompatible with
Supported agents
Assesses arithmetic safety, auditing, access controls, complexity, decentralization, documentation, MEV risks, low-level code, and testing using Trail of Bits' framework
Produces a maturity scorecard with 0–4 ratings per category, detailed findings with file references, and a priority-ordered improvement roadmap
Combines automated code analysis with interactive clarification
AI-first code editor with Composer
Before installing skills in Cursor, ensure your development environment meets these requirements:
node --versioncode-maturity-assessorExecute the skills CLI command in your project's root directory to begin installation:
epx add trailofbits/skills --skill code-maturity-assessorFetches code-maturity-assessor from trailofbits/skills and configures it for Cursor.
The CLI shows a list of agents. Use arrow keys and space to select Cursor:
Confirm successful installation by checking the skill directory location:
.cursor/skills/code-maturity-assessor
Restart Cursor to activate code-maturity-assessor. Access via /code-maturity-assessorin your agent's command palette.
Learn more:View source on GitHubSkills CLI docsAbout CursorWhat are agent skills?
Time estimate: 30-60 minutes to see productivity improvements
Prerequisites
Steps
Common Pitfalls
✓ Do
✗ Don't
💡 Pro Tips
✓ Use when
Use for user story writing, competitive research, roadmap prioritization, stakeholder communication, and PRD drafting. Best for reducing repetitive documentation and research work.
✗ Avoid when
Avoid for strategic product vision (requires deep customer empathy), pricing decisions (needs market and financial expertise), or when face-to-face customer discovery is more valuable than speed.
no-mistakes
kunchenguid/no-mistakes · devops · tag: code
xauusd-trading
huynguyen03dev/xauusd-trading · Productivity · same category
web-accessibility
supercent-io/skills-template · Productivity · same category
lua
mindrally/skills · Productivity · same category
electron-best-practices
jwynia/agent-skills · Productivity · same category
modly-image-to-3d
aradotso/trending-skills · Productivity · same category
I recommend code-maturity-assessor for anyone iterating fast on agent tooling; clear intent and a small, reviewable surface area.
code-maturity-assessor reduced setup friction for our internal harness; good balance of opinion and flexibility.
Solid pick for teams standardizing on skills: code-maturity-assessor is focused, and the summary matches what you get after install.
We added code-maturity-assessor from the explainx registry; install was straightforward and the SKILL.md answered most questions upfront.
Useful defaults in code-maturity-assessor — fewer surprises than typical one-off scripts, and it plays nicely with `npx skills` flows.
Registry listing for code-maturity-assessor matched our evaluation — installs cleanly and behaves as described in the markdown.
code-maturity-assessor fits our agent workflows well — practical, well scoped, and easy to wire into existing repos.
Registry listing for code-maturity-assessor matched our evaluation — installs cleanly and behaves as described in the markdown.
Useful defaults in code-maturity-assessor — fewer surprises than typical one-off scripts, and it plays nicely with `npx skills` flows.
code-maturity-assessor has been reliable in day-to-day use. Documentation quality is above average for community skills.
showing 1-10 of 42