constant-time-analysis
An agent skill by trailofbits, from trailofbits/skills. Tags: analysis, code-quality, crypto, debugging, security.
What it does
Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encountering division on secrets, secret-dependent branches, or constant-time programming questions in C, C++, Go, Rust, Swift, Java, Kotlin, C#, PHP, JavaScript, TypeScript, Python, or Ruby.
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add trailofbits/skills --skill constant-time-analysisOr copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/trailofbits/skills
cp -r skills/plugins/constant-time-analysis/skills/constant-time-analysis ~/.claude/skills/constant-time-analysisSafety box score
Not rated yet. A safety box score grades what a skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. Anyone can request one from this page; it is saved for everyone. How the score works.
Source
- Repository
- trailofbits/skills (all skills from this repository)
- Path
- plugins/constant-time-analysis/skills/constant-time-analysis/SKILL.md
- Branch
- main
- Collection
- constant-time-analysis
- Updated
- 2026-09-19
Related skills
- audit-context-building — Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere.
- c-review — Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities.
- differential-review — Performs security-focused differential review of code changes.
- rust-review — Performs comprehensive Rust security review for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS.
- audit-prep-assistant — Prepares codebases for security review using Trail of Bits' checklist.
- code-maturity-assessor — Systematic code maturity assessment using Trail of Bits' 9-category framework.