trailmark

What problem does it solve?

Trailmark turns source code into a queryable security graph so you can trace how inputs flow through functions to find attack surface, taint propagation, privilege boundaries, and blast radius before deeper review.

Core Features & Use Cases

• Directed call graph for security analysis: Parses functions, classes, modules, and call relationships into a graph that supports security-focused queries.
• Pre-analysis for audit prioritization: Runs blast radius estimation, entry point enumeration, privilege boundary detection, and taint propagation so you can focus on the highest-risk nodes and paths.
• Polyglot and static graph modeling: Supports multi-language trees with explicit or auto language selection and models edge confidence (certain vs inferred vs uncertain) for more defensible security claims.
• Use Cases: Trace call paths from user input to sensitive sinks, enumerate reachable entrypoints, identify complexity hotspots on tainted paths, and generate graph exports or JSON for downstream auditing workflows.

Quick Start

Use the trailmark skill to build a security call graph from a target directory by running the command: uv run trailmark analyze --language auto --summary {targetDir}