skills.rest
rohanbhatia27
rohanbhatia27COMMUNITY
Explore all skills by this author →
GitHub

audit-augmentation

Enhances code graphs with SARIF audit findings mapped to nodes by file and line overlap.

1|Updated Apr 7, 2026
Search Tags:#static analysis#audit findings#SARIF#code graph#weAudit
One-click install
npx skills add https://github.com/rohanbhatia27/rohanstutoring-redesign --skill audit-augmentation-rohanbhatia27
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: audit-augmentation
Source: https://github.com/rohanbhatia27/rohanstutoring-redesign/tree/main/.agents/skills/audit-augmentation
Command: npx skills add https://github.com/rohanbhatia27/rohanstutoring-redesign --skill audit-augmentation-rohanbhatia27

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires trailmark, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the challenge of overlaying external audit findings onto code graphs, enabling a deeper understanding of code structure and security vulnerabilities.

Core Features & Use Cases

  • External Audit Integration: Incorporates findings from SARIF static analysis and weAudit annotations.
  • Graph Mapping: Maps findings to graph nodes by file and line overlap.
  • Subgraph Creation: Generates severity-based subgraphs for efficient triage.
  • Cross-Referencing: Allows for referencing findings with pre-analysis data like blast radius and taint.

Quick Start

Use the audit-augmentation skill to enhance your code graph with SARIF findings from 'results.sarif' and weAudit annotations from '.vscode/alice.weaudit'.

Frequently Asked Questions about audit-augmentation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map SARIF static analysis findings onto a code graph?▼

To map SARIF static analysis findings onto a code graph, you overlay external audit results by matching findings to graph nodes through file and line overlap. This enables cross-referencing vulnerabilities with pre-analysis data.

What is the best way to integrate weAudit annotations with static analysis results?▼

Integrating weAudit annotations with static analysis results involves enhancing a code graph by mapping both external data sources to graph nodes via file and line overlap, creating a unified view for deeper security analysis.

Do I need Trailmark to augment code graphs with audit findings?▼

Yes, you need Trailmark to generate the underlying code graph and perform analysis. Trailmark provides the structural foundation required to map external SARIF findings and weAudit annotations onto specific code graph nodes.

How does severity-based subgraph creation help triage static analysis findings?▼

Severity-based subgraph creation helps triage static analysis findings by grouping graph nodes into targeted clusters based on vulnerability severity. This allows efficient isolation and prioritization of critical audit issues.

Can I cross-reference audit findings with pre-analysis data like blast radius?▼

Yes, you can cross-reference audit findings with pre-analysis data like blast radius and taint. Mapping external audit results onto the code graph enables overlaying vulnerability data with existing structural analysis.

Related Skills

Explore More Software Engineering Skills→
trailofbitstrailofbits
6.5k

audit-augmentation

Integrates SARIF and weAudit static analysis findings into code graphs for security analysis.

Official
Advanced
ayehiaaayehiaa

audit-augmentation

Overlay SARIF and weAudit findings onto Trailmark code graph nodes.

Community
Intermediate
manuelbrandner85manuelbrandner85

audit-augmentation

Map SARIF and weAudit findings onto Trailmark code graphs.

Community
Advanced
iiammaeiiammae

audit-augmentation

Map SARIF and weAudit findings onto Trailmark code graphs for security audits.

Community
Advanced