Constant Time Analysis
Checks sensitive and crypto code for timing leaks, where run time reveals secret data. A defensive specialist skill.
How to use it
Install it with the open Skills CLI (needs Node.js), then restart your agent:
npx skills add trailofbits/skills --skill constant-time-analysis- Download the ZIP from this page and unzip it.
- Put the
constant-time-analysisfolder in.claude/skills/inside your project (or~/.claude/skills/for all projects). - Restart Claude Code and call it with
/constant-time-analysis.
بالعربي
يراجع احتمالات تسريب المعلومات عبر اختلاف زمن التنفيذ في الكود الحساس والتشفيري؛ مهارة تخصصية دفاعية.
More for security
- /security-review (built into Claude Code): Runs a full security review of the pending changes on your branch.
- Security Review: Reviews auth, input handling, secrets and APIs before release, using a practical security checklist.
- Audit Context Building: Builds a precise picture of code flow, assumptions and dependencies before a security audit, so findings have context.