Constant Time Testing
trailofbits/skills
Measures timing side channels in cryptographic implementations by running them, using dudect for statistical analysis and Timecop over Valgrind for dynamic tracing.
Gate any new hash, digest, checksum, signature, nonce, MAC, or content-addressed identifier.
Install Hashing Gate
$ npx skills add tola-rs/tola-ssg --skill hashing-gate -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install tola-rs/tola-ssg hashing-gate --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/tola-rs/tola-ssg.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/hashing-gate .claude/skills/hashing-gate && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "hashing-gate" agent skill from https://github.com/tola-rs/tola-ssg/tree/main/.agents/skills/hashing-gate into .claude/skills/hashing-gate/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "hashing-gate", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/tola-rs/tola-ssg/tree/main/.agents/skills/hashing-gateType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add tola-rs/tola-ssg --skill hashing-gate -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install tola-rs/tola-ssg hashing-gate --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/tola-rs/tola-ssg.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.agents/skills/hashing-gate .agents/skills/hashing-gate && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "hashing-gate" agent skill from https://github.com/tola-rs/tola-ssg/tree/main/.agents/skills/hashing-gate into .agents/skills/hashing-gate/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "hashing-gate", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add tola-rs/tola-ssg --skill hashing-gate -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install tola-rs/tola-ssg hashing-gate --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/tola-rs/tola-ssg.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.agents/skills/hashing-gate .cursor/skills/hashing-gate && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "hashing-gate" agent skill from https://github.com/tola-rs/tola-ssg/tree/main/.agents/skills/hashing-gate into .cursor/skills/hashing-gate/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "hashing-gate", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/tola-rs/tola-ssg.git --path .agents/skills/hashing-gate--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add tola-rs/tola-ssg --skill hashing-gate -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install tola-rs/tola-ssg hashing-gate --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/tola-rs/tola-ssg.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.agents/skills/hashing-gate .gemini/skills/hashing-gate && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "hashing-gate" agent skill from https://github.com/tola-rs/tola-ssg/tree/main/.agents/skills/hashing-gate into .gemini/skills/hashing-gate/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "hashing-gate", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install tola-rs/tola-ssg hashing-gateInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add tola-rs/tola-ssg --skill hashing-gate -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/tola-rs/tola-ssg.git skills-src && mkdir -p .github/skills && cp -r skills-src/.agents/skills/hashing-gate .github/skills/hashing-gate && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "hashing-gate" agent skill from https://github.com/tola-rs/tola-ssg/tree/main/.agents/skills/hashing-gate into .github/skills/hashing-gate/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "hashing-gate", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add tola-rs/tola-ssg --skill hashing-gate -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install tola-rs/tola-ssg hashing-gate --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/tola-rs/tola-ssg.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.agents/skills/hashing-gate .opencode/skills/hashing-gate && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "hashing-gate" agent skill from https://github.com/tola-rs/tola-ssg/tree/main/.agents/skills/hashing-gate into .opencode/skills/hashing-gate/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "hashing-gate", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
hashing-gate- GitHub stars
- 178
- Token cost
- ~380 tokens
- SKILL.md length
- 155 words
- Files
- 1
- Skills in repo
- 10
- Repo updated
- First seen
- Licence
- MIT
At a glance
Gate any new hash, digest, checksum, signature, nonce, MAC, or content-addressed identifier.
- Works in 3 steps: Explicitly required by user's request or… → Existing project format, protocol, API,… → Concrete observed failure a simpler…
- About to introduce hashing
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
- A cryptographic primitive
What it does
Hashing Gate is an agent skill from tola-rs/tola-ssg. Gate any new hash, digest, checksum, signature, nonce, MAC, or content-addressed identifier. Use when about to introduce hashing or a cryptographic primitive, or when a plan reaches for a digest for identity, change detection, cache keys, locking, or integrity.
Its SKILL.md is about 380 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Security, covering Cryptography and Anomaly detection. The repository describes itself as: SSG for typst-based websites - keep your focus on the content. The licence is MIT.
When your agent uses it
- About to introduce hashing
- A cryptographic primitive
- A plan reaches for a digest for identity
- Change detection
Example prompts
- “/hashing-gate”
Workflow steps
3 steps, taken from the first numbered list in SKILL.md.
- Explicitly required by user's request or acceptance criteria?
- Existing project format, protocol, API, or compatibility requirement already requires this exact mechanism?
- Concrete observed failure a simpler mechanism cannot solve without hashing/cryptography?
What it can do on your machine
Read from SKILL.md and the folder at commit fbb0506. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Hashing Gate loads about 380 tokens when it runs. Until then it costs about 69 tokens; SKILL.md has 155 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from tola-rs/tola-ssg at commit fbb0506, republished under its MIT licence (© tola-rs). 155 words, ~380 tokens.
Download SKILL.mdSave it as
.claude/skills/hashing-gate/SKILL.md (or your agent's skills folder).- name
- hashing-gate
- description
- Gate any new hash, digest, checksum, signature, nonce, MAC, or content-addressed identifier. Use when about to introduce hashing or a cryptographic primitive, or when a plan reaches for a digest for identity, change detection, cache keys, locking, or integrity.
Hashing Gate
Adding any hash, digest, checksum, signature, nonce, MAC, cryptographic primitive, or content-addressed identifier = architectural expansion.
Before adding one, ask all three:
- Explicitly required by user's request or acceptance criteria?
- Existing project format, protocol, API, or compatibility requirement already requires this exact mechanism?
- Concrete observed failure a simpler mechanism cannot solve without hashing/cryptography?
Any answer not clearly yes ⇒ do not add.
Do not invent SHA-256 or another digest merely for: approval tokens, change detection, identity, deduplication, freshness checks, locking / leases, cache keys, integrity, defensive validation, future-proofing.
Prefer existing identifiers, timestamps, version fields, object identity, or direct comparison when they already satisfy the task.
Hashing useful but not part of the original requirement ⇒ report as possible follow-up, do not implement.
Three-strikes rule
Before typing SHA, hash, digest, checksum, nonce, signature, BLAKE, MD5, CRC, xxHash, or similar:
STOP. Re-read original request three times. Original requirement lacks a hash-like mechanism ⇒ do not introduce one.
© tola-rs, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in .agents/skills/hashing-gate of tola-rs/tola-ssg.
Open the folder on GitHubat commit fbb0506
Compare with similar skills
Hashing Gate next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Hashing Gate this skilltola-rs/tola-ssg | 178 | — | ~380 | Automated safety check: Pass | MIT | |
| Constant Time Testingtrailofbits/skills | 7.5k | — | ~5.2k | Automated safety check: Pass | CC-BY-SA-4.0 | |
| Configuring Suricata For Network Monitoringmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~3.6k | Automated safety check: Notes | Apache-2.0 | |
| Implementing Ot Network Traffic Analysis With Nozomimukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~2.5k | Automated safety check: Pass | Apache-2.0 | |
| Threat Detectionalirezarezvani/claude-skills | 28k | — | ~3.5k | Automated safety check: Pass | MIT | |
| Analyzing Security Logs With Splunkmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~2.5k | Automated safety check: Pass | Apache-2.0 |
Similar skills
- Official
Configuring Suricata For Network Monitoring
mukul975/Anthropic-Cybersecurity-Skills
Deploys and configures Suricata IDS/IPS with Emerging Threats rulesets, EVE JSON logging, and custom rules for high-throughput, protocol-aware traffic inspection (HTTP, TLS, DNS, SMB) and SIEM…
Implementing Ot Network Traffic Analysis With Nozomi
mukul975/Anthropic-Cybersecurity-Skills
Deploy Nozomi Networks Guardian sensors for passive OT network traffic analysis, providing asset visibility, behavioral anomaly detection, protocol-aware monitoring, and vulnerability assessment…
Threat Detection
alirezarezvani/claude-skills
A skill your agent uses when hunting for threats in an environment, analyzing IOCs, or detecting behavioral anomalies in telemetry.
Analyzing Security Logs With Splunk
mukul975/Anthropic-Cybersecurity-Skills
Leverages Splunk Enterprise Security and SPL (Search Processing Language) to investigate security incidents through log correlation, timeline reconstruction, and anomaly detection.
Detecting Stuxnet Style Attacks
mukul975/Anthropic-Cybersecurity-Skills
Detects sophisticated cyber-physical attacks that follow the Stuxnet pattern of modifying PLC logic while spoofing sensor readings to hide the manipulation, using PLC logic integrity monitoring…
More from tola-rs/tola-ssg
All 10 skills in this repoTrim
tola-rs/tola-ssg
Shrink code, tests, comments, and docs to what carries meaning — delete dead paths, redundant states, and refactor-dragging tests outright, then hold the survivors to the four bars.
Tola
tola-rs/tola-ssg
Build and maintain Tola websites and documentation. An agent skill from tola-rs/tola-ssg.
Concurrency And Failure
tola-rs/tola-ssg
Design and review work that runs concurrently, waits, retries, or owns resources.
Friendly Report
tola-rs/tola-ssg
Report progress to the human. An agent skill from tola-rs/tola-ssg.
Refactoring
tola-rs/tola-ssg
Restructure code while keeping observable behavior identical, and prove it with difference testing.
Subagent Delegation
tola-rs/tola-ssg
Run work through subagents instead of the main thread. An agent skill from tola-rs/tola-ssg.
Related
Categories
Questions about Hashing Gate
What does Hashing Gate do?
Gate any new hash, digest, checksum, signature, nonce, MAC, or content-addressed identifier. Hashing Gate is an agent skill from tola-rs/tola-ssg. Gate any new hash, digest, checksum, signature, nonce, MAC, or content-addressed identifier.
When should I use Hashing Gate?
Hashing Gate fits situations like: about to introduce hashing; A cryptographic primitive; A plan reaches for a digest for identity; change detection.
How do I install Hashing Gate in Claude Code?
Run `npx skills add tola-rs/tola-ssg --skill hashing-gate -a claude-code`. Or copy the skill folder (.agents/skills/hashing-gate in tola-rs/tola-ssg) into .claude/skills/hashing-gate in your project. Claude Code loads it when a task matches its description.
How do I install Hashing Gate in Codex?
Run `npx skills add tola-rs/tola-ssg --skill hashing-gate -a codex`. Or copy the skill folder (.agents/skills/hashing-gate in tola-rs/tola-ssg) into .agents/skills/hashing-gate in your project. Codex loads it when a task matches its description.
Can I use Hashing Gate in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add tola-rs/tola-ssg --skill hashing-gate -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/hashing-gate, .gemini/skills/hashing-gate, .github/skills/hashing-gate and .opencode/skills/hashing-gate in your project.
What does Hashing Gate need to run?
SKILL.md names no scripts, command-line tools or credentials: Hashing Gate is instructions for the agent only.
Does Hashing Gate access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Hashing Gate safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Hashing Gate use?
Hashing Gate is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Hashing Gate use?
About 380 tokens (SKILL.md is roughly 1.5k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Hashing Gate?
Skills that share tags, products or a category with Hashing Gate: Constant Time Testing (trailofbits/skills, 7.5k stars), Configuring Suricata For Network Monitoring (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Implementing Ot Network Traffic Analysis With Nozomi (mukul975/Anthropic-Cybersecurity-Skills, 34k stars) and Threat Detection (alirezarezvani/claude-skills, 28k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Hashing Gate?
tola-rs (a GitHub organization) maintains it in tola-rs/tola-ssg, which has 178 GitHub stars. The repository holds 10 skills in this directory. The repository was last updated on October 9, 2026.
Source: tola-rs/tola-ssg on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.