audit-augmentation

Name: audit-augmentation
Availability: InStock
Author: rohanbhatia27

Enhances code graphs with SARIF audit findings mapped to nodes by file and line overlap.

1|Updated Apr 7, 2026

Search Tags:#static analysis #audit findings #SARIF #code graph #weAudit

Ready to run

npx skills add https://github.com/rohanbhatia27/rohanstutoring-redesign --skill audit-augmentation-rohanbhatia27

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: audit-augmentation
Source: https://github.com/rohanbhatia27/rohanstutoring-redesign/tree/main/.agents/skills/audit-augmentation
Command: npx skills add https://github.com/rohanbhatia27/rohanstutoring-redesign --skill audit-augmentation-rohanbhatia27

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires trailmark, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the challenge of overlaying external audit findings onto code graphs, enabling a deeper understanding of code structure and security vulnerabilities.

Core Features & Use Cases

External Audit Integration: Incorporates findings from SARIF static analysis and weAudit annotations.
Graph Mapping: Maps findings to graph nodes by file and line overlap.
Subgraph Creation: Generates severity-based subgraphs for efficient triage.
Cross-Referencing: Allows for referencing findings with pre-analysis data like blast radius and taint.

Quick Start

Use the audit-augmentation skill to enhance your code graph with SARIF findings from 'results.sarif' and weAudit annotations from '.vscode/alice.weaudit'.

Frequently Asked Questions about audit-augmentation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I map SARIF static analysis findings onto a code graph?▼

To map SARIF static analysis findings onto a code graph, you overlay external audit results by matching findings to graph nodes through file and line overlap. This enables cross-referencing vulnerabilities with pre-analysis data.

What is the best way to integrate weAudit annotations with static analysis results?▼

Integrating weAudit annotations with static analysis results involves enhancing a code graph by mapping both external data sources to graph nodes via file and line overlap, creating a unified view for deeper security analysis.

Do I need Trailmark to augment code graphs with audit findings?▼

Yes, you need Trailmark to generate the underlying code graph and perform analysis. Trailmark provides the structural foundation required to map external SARIF findings and weAudit annotations onto specific code graph nodes.

How does severity-based subgraph creation help triage static analysis findings?▼

Severity-based subgraph creation helps triage static analysis findings by grouping graph nodes into targeted clusters based on vulnerability severity. This allows efficient isolation and prioritization of critical audit issues.

Can I cross-reference audit findings with pre-analysis data like blast radius?▼

Yes, you can cross-reference audit findings with pre-analysis data like blast radius and taint. Mapping external audit results onto the code graph enables overlaying vulnerability data with existing structural analysis.