skills.rest
irrit-us
irrit-usOFFICIAL
Explore all skills by this author →
GitHub

trailmark-structural

Runs Trailmark preanalysis to report hotspots, taint, blast radius, and attack surface.

Updated May 17, 2026
Search Tags:#static analysis#security audit#attack surface#blast radius#taint analysis#code graph#trailmark
One-click install
npx skills add https://github.com/irrit-us/agent_misc --skill trailmark-structural-irrit-us
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: trailmark-structural
Source: https://github.com/irrit-us/agent_misc/tree/main/skills/trailmark-structural
Command: npx skills add https://github.com/irrit-us/agent_misc --skill trailmark-structural-irrit-us

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires trailmark.

What problem does it solve? Security auditors and code reviewers need detailed structural data about a codebase—complexity hotspots, taint flows, blast radius, privilege boundaries, and attack surface—before prioritizing an audit. Manually gathering this data is slow and error-prone. ## Core Features & Use Cases - Full Preanalysis Pipeline: Builds a Trailmark code graph and runs all four pre-analysis passes via engine.preanalysis(). - Structured JSON Output: Returns languages, summary, hotspots, attack surface, and subgraph counts with sample node IDs. - Use Case: During Vivisect Phase 1 of a security audit, point the skill at a target repository to get taint and blast radius data that drives audit prioritization. ## Quick Start Run full Trailmark structural analysis on the target directory and return the complete JSON payload with hotspots, taint, and attack surface.

Frequently Asked Questions about trailmark-structural

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run Trailmark structural analysis on a codebase?▼

Pass the target directory as the args parameter. The skill detects supported languages with trailmark.parse.detect_languages, builds a graph via QueryEngine.from_directory, and runs engine.preanalysis() to return a full JSON payload.

What does Trailmark preanalysis output include?▼

The output includes detected languages, a graph summary, preanalysis results, complexity hotspots, attack surface entries, and subgraph counts with sample node IDs. Some subgraphs may be empty for certain codebases, which is normal.

When should I use trailmark-structural instead of trailmark-summary?▼

Use trailmark-structural when you need detailed data like taint, blast radius, and privilege boundaries for audit prioritization. Use trailmark-summary for a quick overview only, since summary analysis skips those deeper passes.

What happens if trailmark is not installed?▼

The skill checks availability with trailmark analyze --help or uv run trailmark analyze --help. If neither works, it reports that trailmark is not installed and stops; it never runs pip install or other install commands.

Why does a Trailmark pass return empty results?▼

Empty pass output does not mean failure. Some passes produce no data for certain codebases, such as when no privilege boundaries exist. The skill returns the full JSON payload regardless of empty sections.

Related Skills

Explore More Software Engineering Skills→
trailofbitstrailofbits
6.5k

trailmark

Analyze source code for security vulnerabilities using code graphs.

Official
Advanced
narlyseorgnarlyseorg
6

secure-code-review

Identify security vulnerabilities in source code via taint-analysis and pattern scanning.

Community
Advanced
dreadnodedreadnode
11

cypher-investigation

Run safe, scoped OpenCypher queries for custom Bloodhound Enterprise graph investigations.

Official
Intermediate
allanninalallanninal
1

variant-analysis

Hunt for similar vulnerabilities across codebases using pattern-based analysis.

Community
Advanced