Trailmark
by @trailofbits · plugin · 10 skills
Builds multi-language source code graphs for security analysis: call graphs, attack surface mapping, blast radius, taint propagation, complexity hotspots, and entry point enumeration. Generates Mermaid diagrams (call graphs, class hierarchies, dependency maps, heatmaps). Compares code graph snapshots for structural diff and evolution analysis. Runs graph-informed mutation testing triage (genotoxic
Install the whole plugin (CLI)
npx skillmds add trailofbits/genotoxic
npx skillmds add trailofbits/trailmark
npx skillmds add trailofbits/vector-forge
npx skillmds add trailofbits/graph-evolution
npx skillmds add trailofbits/diagramming-code
npx skillmds add trailofbits/trailmark-summary
npx skillmds add trailofbits/audit-augmentation
npx skillmds add trailofbits/mermaid-to-proverif
npx skillmds add trailofbits/trailmark-structural
npx skillmds add trailofbits/crypto-protocol-diagramSkills in this plugin
- ▌ genotoxic · trailofbits bundleTriage mutation testing results by combining survived mutants, unnecessary test statements, and code graph analysis to identify false positives, missing test coverage, and fuzzing targets.
- ▌ trailmark · trailofbits bundleBuilds and queries multi-language source code graphs for security analysis, including blast radius, taint propagation, privilege boundaries, and entry point enumeration.
- ▌ vector-forge · trailofbits bundleUses mutation testing to systematically identify gaps in test vector coverage for cryptographic algorithms, then generates new test vectors that close those gaps. Measures effectiveness by comparing mutation kill rates before and after.
- ▌ graph-evolution · trailofbits bundleCompares Trailmark code graphs at two source code snapshots to surface security-relevant structural changes that text diffs miss, such as new attack paths, blast radius growth, and privilege boundary modifications.
- ▌ diagramming-code · trailofbits bundleGenerates Mermaid diagrams from code graphs, including call graphs, class hierarchies, module dependency maps, and data flow visualizations.
- ▌ trailmark-summary · trailofbits bundleRuns a Trailmark summary analysis on a codebase to auto-detect languages, count entry points, and list dependencies.
- ▌ audit-augmentation · trailofbits bundleProjects external audit findings from SARIF static analysis results and weAudit annotation files onto Trailmark code graphs as annotations and subgraphs, enabling cross-referencing with pre-analysis data like blast radius and taint.
- ▌ mermaid-to-proverif · trailofbits bundleTranslates Mermaid sequence diagrams of cryptographic protocols into ProVerif formal verification models (.pv files) for proving security properties like secrecy, authentication, and forward secrecy.
- ▌ trailmark-structural · trailofbits bundleRuns full Trailmark structural analysis by building a graph and computing pre-analysis passes for hotspots, taint, blast radius, privilege boundaries, and attack surface.
- ▌ crypto-protocol-diagram · trailofbits bundleExtracts protocol message flow from source code, RFCs, academic papers, pseudocode, or formal models (ProVerif/Tamarin) and generates Mermaid sequence diagrams with cryptographic annotations.