trailmark

Name: trailmark
Availability: InStock
Author: rohanbhatia27

Construct and query multi-language source code graphs for security analysis.

1|Updated Apr 7, 2026

Search Tags:#source code analysis #blast radius #security auditing #taint analysis #code graph

Ready to run

npx skills add https://github.com/rohanbhatia27/rohanstutoring-redesign --skill trailmark-rohanbhatia27

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: trailmark
Source: https://github.com/rohanbhatia27/rohanstutoring-redesign/tree/main/.agents/skills/trailmark
Command: npx skills add https://github.com/rohanbhatia27/rohanstutoring-redesign --skill trailmark-rohanbhatia27

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires trailmark, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill addresses the challenge of analyzing complex source code for security vulnerabilities by providing a comprehensive tool to build and query multi-language source code graphs.

Core Features & Use Cases

Source Code Graph Construction: Parses source code into a graph, capturing functions, classes, calls, and metadata.
Security Analysis: Offers pre-analysis passes for blast radius, taint propagation, privilege boundaries, and entry point enumeration.
Use Case: Ideal for security reviews or audits, especially in polyglot projects, where understanding call paths and attack surfaces is crucial.

Quick Start

Analyze the code in the directory 'source-code' using trailmark.

Frequently Asked Questions about trailmark

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform taint analysis and blast radius checks on multi-language source code?▼

A source code graph maps functions, classes, and calls to map attack surfaces and trace data flow across polyglot projects. It enables pre-analysis passes for blast radius, taint propagation, and privilege boundaries during security audits.

Can I analyze source code graphs for security auditing in polyglot projects?▼

Yes, source code graph construction supports security auditing in polyglot projects by parsing multi-language code into a unified graph. This allows you to understand call paths, entry points, and attack surfaces across different languages.

What do I need to build and query source code graphs for vulnerability analysis?▼

You need Python and specific parsing and querying libraries to build and query source code graphs for vulnerability analysis. These dependencies are required to construct the graph and execute security pre-analysis passes.

How does code graph analysis identify entry points and privilege boundaries?▼

Code graph analysis identifies entry points and privilege boundaries by running pre-analysis passes on the constructed source code graph. This captures metadata and call paths to expose the security boundaries within the codebase.

Are there limitations when using source code graphs for security reviews?▼

The main limitation is the strict requirement for Python and specific parsing libraries to construct and query the graph. Security reviews depend entirely on the accuracy of this initial code parsing and graph building phase.