constant-time-secret-compare Eval report.

Task wording matches this skill metadata.

• Evaluate constant-time-secret-compare before installing it in an agent workflow
• security
• Security and compliance workflows; Claude Code teams; builders willing to evaluate younger projects

Install handoff is available.

• npx skills add randommonicle/claude-skills --skill constant-time-secret-compare

credential-bearing install command, standard package or runtime install path

• npx skills add randommonicle/claude-skills --skill constant-time-secret-compare

Potentially useful, but at least one trust signal needs human inspection.

• Manual review
• 23 GitHub stars
• Apache-2.0

Needs review

• Permission surface may require sandboxing

Sparse or mixed signals. Useful for discovery, but not for autonomous installation.

• Test manually in an isolated workspace and compare against safer alternatives.
• High-risk permission hints: Secrets or environment access

Apache-2.0

• Apache-2.0

secrets or environment access, network or browser access

• Network access: medium
• Secrets or environment access: high