audit-augmentation

What problem does it solve?

Audit Augmentation maps external audit and static-analysis findings onto the nodes of a Trailmark code graph, so security issues can be understood in the context of code structure and pre-analysis reachability data.

Core Features & Use Cases

• Project SARIF findings onto graph nodes: matches findings by file path and overlapping line ranges, then builds severity- and tool-specific subgraphs (e.g., sarif:error, sarif:semgrep).
• Import weAudit findings and notes: converts weAudit entries into Trailmark annotations, including separate subgraphs for findings vs notes and for severity tiers.
• Cross-reference with pre-analysis context: enables prioritization by correlating findings with blast radius, taint, privilege boundaries, and other pre-analysis subgraphs.

Quick Start

Use the audit-augmentation skill to augment a Trailmark target directory with your SARIF file and then query sarif:error and weaudit:high subgraphs together to prioritize the most actionable issues.