constant time analysis

Name: constant time analysis
Author: trailofbits

by trailofbits·18d ago

Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, enco…

Claude CodeMedium risk · 中风险open source · 开源

Editor's verdict· 编辑结论

Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encountering division on secrets, secret-dependent branches, or constant-time programming questions in C, C++, Go, Rust, Swift, Java, Kotlin, C#, PHP, JavaScript, T…
— Editorial team · 编辑团队

Install via Skills CLI

Use npx skills add to install this skill into the selected agent. Phase 0 commands are generated from source rules, not verified.

Codex

npx skills add https://github.com/trailofbits/skills/blob/main/plugins/constant-time-analysis/skills/constant-time-analysis/SKILL.md -g -a codex -y

Drop `-g` to install project-locally

✓

Best for适合什么场景

深度研究
资料检索
趋势分析

✗

Not for不适合什么场景

Workflows that require stronger human review than this catalog entry documents.需要比当前目录条目更严格人工复核的工作流。

vs alternativesvs 其他选择

Full compare table完整对比表 →

#1xlsx

xlsx: agent skill — from anthropics/skills.

132k stars

diff · 差异Best for the cleanup-validate-analyze loop on real-world spreadsheets — inconsistent date formats, mixed types in "numeric" columns, hidden merged cells, schemas that change row-by-row. Reads the file, surfaces structural issues before they corrupt downstream analysis. Strongest on messy production-data scenarios. Skip it for clean exported data; that's just pandas.

#2graphify

graphify: agent skill — from safishamsi/graphify.

46k stars

diff · 差异Best when relationships matter more than rows — knowledge graphs over flat tables, entity-and-edge extraction from text, querying multi-hop connections (who introduced whom, which dependency led where). Strongest on research workflows where you need to trace links across messy sources. Skip it for tabular aggregations; a spreadsheet beats a graph there.

#3customer research

customer research: agent skill — from coreyhaines31/marketingskills.

28k stars

diff · 差异Best for synthesizing customer interviews, support logs, and survey results into ranked insights you can actually act on. Tagged-quote extraction, theme clustering, and prioritization without losing the original speaker context. Strongest when you have raw qualitative data piling up. Skip it for quantitative analytics; that's xlsx or graphify's job.

Side-by-side compare维度对比

Key differences with same-lane alternatives

	this skill · 当前constant time analysis	xlsx	graphify	customer research
Rating · 评分	—	—	—	—
Stars · 星标	5.1k	132k	46k	28k
Risk · 风险	Medium risk · 中风险	Low risk · 低风险	Low risk · 低风险	Low risk · 低风险
Best for · 最适合	深度研究	xlsx: agent skill — from anthropics/skills.	graphify: agent skill — from safishamsi/graphify.	customer research: agent skill — from coreyhaines31/marketingskills.
Not for · 不适合	Workflows that require stronger human review than this catalog entry documents.	Workflows that require stronger human review than this catalog entry documents.	Workflows that require stronger human review than this catalog entry documents.	Workflows that require stronger human review than this catalog entry documents.

Audit notes审计备注

last reviewed 2026-06-03 · 复查

Source源码open on GitHub · 公开✓

Author作者community · 社区!

Network网络访问network access · 需联网✓

Filesystem文件写入writes to repo · 写入仓库!

Dependencies依赖many deps · 依赖较多✓

Telemetry遥测none · 无✓