trailmark

Builds and queries multi-language source code graphs for security analysis. Includes pre-analysis passes for blast radius, taint propagation, privilege boundaries, and entry point enumeration. Use whe

SKILL.md

GitHub

trailmark

Use this skill when the task matches the description above or the source path clearly applies. Start with this concise entrypoint; open ../../../../../skills/by-category/security-compliance-risk/security-reference/trailmark/SKILL.md only when implementation details, commands, assets, or references are needed.

Before repository work, read and apply Mandatory agent tools: Caveman for every task, CocoIndex Code before broad code navigation, and Crawl4AI for web-page research. Retain actual execution evidence; do not claim unavailable tools ran. Repository-level rules remain controlling.

Workflow

  1. Confirm the task matches this skill's scope.
  2. Read the local source mirror if more detail is required.
  3. Follow repository-level AGENTS.md; use one AI session only.
  4. Keep claims tied to files, commands, citations, or benchmark artifacts.

Verification

  • Source mirror: ../../../../../skills/by-category/security-compliance-risk/security-reference/trailmark/SKILL.md
  • Source commit: e8cc5baf9329ccb491bfa200e82eacbac83b1ead
  • Static benchmark results: see docs/benchmark-results.md
  • Runtime artifacts recorded by this entrypoint: 0
  • Assigned scenarios: skill-proof-trailofbits-skills-plugins-trailmark-skills-trailmark-skill-md, security-compliance-and-risk-owasp-benchmark, security-compliance-and-risk-owasp-juice-shop, security-compliance-and-risk-kubernetes-examples

Do not claim this skill passed a runtime benchmark until a validated artifact exists.