trailmark

Construct and query source code graphs for security analysis.

Updated Jun 9, 2026

Search Tags:#security #source code analysis #blast radius #code graph #taint propagation

Ready to run

npx skills add https://github.com/iiammae/opero --skill trailmark-iiammae

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: trailmark
Source: https://github.com/iiammae/opero/tree/main/.agents/skills/trailmark
Command: npx skills add https://github.com/iiammae/opero --skill trailmark-iiammae

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires trailmark, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the construction and querying of multi-language source code graphs, enabling security analysis with pre-analysis passes for blast radius, taint propagation, and more.

Core Features & Use Cases

Source Code Graph Analysis: Parse source code into a directed graph for security analysis.
Pre-analysis Passes: Includes blast radius, taint propagation, and privilege boundaries.
Use Case: Use this Skill to map call paths, identify attack surfaces, and enumerate entry points in your codebase for security audits.

Quick Start

Analyze the code in the 'source-code' directory with trailmark.

Frequently Asked Questions about trailmark

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate source code graph analysis for security insights?▼

Automate source code graph analysis by parsing your codebase into a directed graph to identify blast radius, taint propagation, and privilege boundaries. This maps call paths and enumerates entry points for security audits.

What is blast radius and taint propagation in code security analysis?▼

Blast radius and taint propagation are pre-analysis passes applied to a source code graph. They identify how far vulnerabilities spread and how untrusted data flows through call paths to map your attack surface.

Does trailmark work with multiple programming languages for code graph construction?▼

Trailmark supports various programming languages for constructing and querying multi-language source code graphs. This enables consistent security analysis across different codebases to identify privilege boundaries.

How do I identify attack surfaces and entry points in my codebase?▼

Identify attack surfaces and entry points by running pre-analysis passes on your source code graph. Trailmark automates this mapping of call paths to enumerate potential vulnerabilities for security audits.

Do I need to install trailmark before analyzing my source code directory?▼

Yes, you need to install trailmark before automating source code graph analysis. Once installed, you can parse your source code directory to query taint propagation and blast radius.

What's the best way to map privilege boundaries across a multi-language codebase?▼

Map privilege boundaries across a multi-language codebase by constructing a directed source code graph and running pre-analysis passes. Trailmark automates this to delineate security zones.