trailmark-structural

To calculate blast radius, you can generate a structural code graph and run preanalysis passes to map data flow and identify affected components. This approach uses taint analysis and privilege boundary discovery to show the potential impact scope of a vulnerability.

Structural taint analysis tracks how untrusted data flows through a codebase by building a graph of code structure and dependencies. It helps identify hotspots and privilege boundaries during security audits to prioritize vulnerability investigation.

You can discover privilege boundaries by generating a deep structural graph of the target directory and running preanalysis. This process detects where trust levels change, revealing attack surface areas for detailed audit triage.

Map the attack surface by parsing the target directory to detect supported languages and building a code graph. Running preanalysis passes produces attack-surface-focused reporting with complexity hotspots and sampled subgraph data for investigation.

Yes, you need Trailmark installed to run structural analysis. The skill uses Trailmark's parse API for language detection and graph building, and automatically reruns under uv if the initial Python import fails to handle dependencies.