---
title: "Code Maturity Assessor - Air Market"
description: "You have a codebase and no clear sense of how well it holds up. This walks through it across nine areas - things like arithmetic, access controls, complexity, documentation and testing - and gives ea…"
canonical: "https://airmarket.ai/app/code-maturity-assessor"
---

[Air Market](/) / [Developer Tools](/category/devtools) / Code Maturity Assessor

Skill by [Trail of Bits](/@trailofbits)

# Code Maturity Assessor

Grade a codebase across nine areas, with evidence for each mark

## What this does

You have a codebase and no clear sense of how well it holds up. This walks through it across nine areas - things like arithmetic, access controls, complexity, documentation and testing - and gives each a rating backed by what it actually found. You end up with a scorecard and a list of things to act on. Useful before an audit or a review.

### Top 3 things it does for you

- Score how mature this codebase is
- Show me where testing and documentation fall short
- Get a scorecard I can hand to stakeholders

## Information

**Code Maturity Assessor at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [Trail of Bits](/@trailofbits) |
| Category | [Developer Tools](/category/devtools) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Size | 28 KB |
| Licence | CC-BY-SA-4.0 |
| Repository | [trailofbits/skills](https://github.com/trailofbits/skills/tree/d5fe2e6a7896236c3102fd5477e833623ad70298/plugins/building-secure-contracts/skills/code-maturity-assessor) |
| GitHub stars | 6,823 (as of Nov 2026) |
| Installs | 7,514, counted by skills.sh (Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of Code Maturity Assessor and flagged nothing. AIR's verdict: **safe**.

**What Code Maturity Assessor's check was run against**

|  |  |
| --- | --- |
| Commit | d5fe2e6a7896236c3102fd5477e833623ad70298 |
| Content hash | 869c28bea9a591af54b4fdce3e07157cc2a7e4e1fd6ecdcdc9f6f7902af5aaae |
| Files read | [Browse the files at this exact commit](https://github.com/trailofbits/skills/blob/d5fe2e6a7896236c3102fd5477e833623ad70298/plugins/building-secure-contracts/skills/code-maturity-assessor/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for Code Maturity Assessor](/security/code-maturity-assessor)

## About Code Maturity Assessor

This assesses code maturity using Trail of Bits' nine-category framework, working through a codebase area by area rather than looking for individual bugs.

The categories it covers are arithmetic safety, auditing practices, access controls, complexity, decentralization, documentation, MEV risks, low-level code, and testing. Each gets a rating grounded in what was found in the code.

The output is a scorecard with evidence-based ratings and recommendations you can act on.

## What's inside

- SKILL.md - instructions
- agents/openai.yaml - data
- assets/trail-of-bits-mark.svg - template
- resources/ASSESSMENT_CRITERIA.md - reference
- resources/EXAMPLE_REPORT.md - reference
- resources/REPORT_FORMAT.md - reference

## Questions

### Is Code Maturity Assessor safe to install?

AIR scanned this exact version of Code Maturity Assessor and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit d5fe2e6a7896, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/code-maturity-assessor.

### How do I install Code Maturity Assessor?

Open https://airmarket.ai/app/code-maturity-assessor on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/trailofbits/skills/tree/d5fe2e6a7896236c3102fd5477e833623ad70298/plugins/building-secure-contracts/skills/code-maturity-assessor. Install from that link, not the branch.

## Related on Air Market

- [More Developer Tools listings](/category/devtools)
- [Everything by Trail of Bits](/@trailofbits)

---

Canonical URL: <https://airmarket.ai/app/code-maturity-assessor>