Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encountering division on secrets, secret-dependent branches, or constant-time programming questions in C, C++, Go, Rust, Swift, Java, Kotlin, C#, PHP, JavaScript, TypeScript, Python, or Ruby.
Install
npx skills add trailofbits/skills --skill constant-time-analysisnpx skills add trailofbits/skills --skill constant-time-analysis -a claude-code -gnpx skills add trailofbits/skills --skill constant-time-analysis -a codex -ggemini skills install https://github.com/trailofbits/skills.git --path plugins/constant-time-analysis/skills/constant-time-analysisgh skill install trailofbits/skills constant-time-analysisgit clone --depth 1 https://github.com/trailofbits/skills /tmp/trailofbits__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/trailofbits__skills/plugins/constant-time-analysis/skills/constant-time-analysis ~/.claude/skills/constant-time-analysis # Claude Code
cp -R /tmp/trailofbits__skills/plugins/constant-time-analysis/skills/constant-time-analysis ~/.agents/skills/constant-time-analysis # Codex, Cursor, Gemini CLI, Copilot, OpenCode