trailmark

Name: trailmark
Availability: InStock
Author: manuelbrandner85

Parse source code into directed graphs for security-focused static analysis.

Updated Nov 23, 2025

Search Tags:#static analysis #security #vulnerability #audit #taint analysis #code graph

Ready to run

npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill trailmark-manuelbrandner85

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: trailmark
Source: https://github.com/manuelbrandner85/Weltenbibliothekapp/tree/main/.agents/skills/trailmark
Command: npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill trailmark-manuelbrandner85

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires uv, trailmark, and includes references (resource) components.

What problem does it solve?

Trailmark addresses the difficulty of understanding complex, multi-language codebases by automating the creation of call graphs and identifying security-critical paths that manual review often misses.

Core Features & Use Cases

Blast Radius Estimation: Quantifies the impact of potential vulnerabilities by measuring downstream and upstream dependencies.
Taint Propagation & Privilege Boundaries: Automatically maps how untrusted input reaches sensitive functions and identifies where trust levels transition.
Use Case: Use this tool during a security audit to identify high-complexity hotspots and trace potential attack surfaces from external entry points to database queries.

Quick Start

Run the trailmark analyze command on the target directory with auto-language detection to generate a comprehensive security graph.

Frequently Asked Questions about trailmark

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform static analysis with taint propagation across a polyglot codebase?▼

Static analysis with taint propagation across a polyglot codebase is performed by parsing source code into directed graphs to map how untrusted input reaches sensitive functions. This process traces potential attack surfaces from external entry points to database queries.

Can I estimate the blast radius of a vulnerability in multi-language repositories?▼

Yes, you can estimate the blast radius of a vulnerability in multi-language repositories by measuring downstream and upstream dependencies within the generated semantic code graph. This quantifies the impact of potential vulnerabilities by analyzing call paths across polyglot environments.

Does trailmark require any specific Python packages to run security audits?▼

Yes, trailmark requires the trailmark Python package and uv to execute pre-analysis passes and query the resulting semantic code graph. These dependencies are necessary to parse source code and generate the security-focused analysis output.

What is the best way to identify privilege boundaries and entry points during a security audit?▼

The best way to identify privilege boundaries and entry points during a security audit is to map call paths in a directed code graph to detect where trust levels transition. This automatically identifies external entry points and traces paths to sensitive functions.

How does taint analysis map untrusted input to sensitive functions in complex codebases?▼

Taint analysis maps untrusted input to sensitive functions by parsing source code into directed graphs and tracing data flow along call paths. This reveals where trust levels transition and highlights security-critical hotspots that manual review often misses.

When should I use code graph static analysis instead of manual security review?▼

You should use code graph static analysis instead of manual review when dealing with complex, multi-language codebases where tracking call paths and taint propagation manually is unfeasible. It automates the creation of call graphs to identify security-critical paths and privilege boundaries.