constant-time-testing
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is purely instructional and educational, providing guidance on how to audit cryptographic code for timing side-channel attacks. No malicious code, prompt injections, or persistence mechanisms were found.
- [EXTERNAL_DOWNLOADS]: The skill provides informational links to several external repositories and websites, including tools such as dudect and timecop, and research papers from Stanford University, USENIX, and other academic sources. These are standard references in the security community and are not configured for automated download or execution.
- [COMMAND_EXECUTION]: The instructions include examples of using common analysis tools like valgrind and shell utilities like taskset. These commands are presented as manual steps for developers to perform side-channel analysis on their own codebases and do not include any hidden or dangerous flags.
Audit Metadata