trailmark-structural

Name: trailmark-structural
Availability: InStock
Author: ayehiaa

Build a Trailmark graph and run preanalysis passes for structural security analysis.

Updated May 2, 2026

Search Tags:#structural analysis #attack surface #blast radius #taint analysis #code graph #privilege boundaries #trailmark

Ready to run

npx skills add https://github.com/ayehiaa/my-travel-assistant --skill trailmark-structural

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: trailmark-structural
Source: https://github.com/ayehiaa/my-travel-assistant/tree/main/.agents/skills/trailmark-structural
Command: npx skills add https://github.com/ayehiaa/my-travel-assistant --skill trailmark-structural

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It solves the problem of understanding a target codebase’s security-relevant structure so you can accurately prioritize and interpret vulnerabilities instead of relying on superficial summaries.

Core Features & Use Cases

Full structural graph + preanalysis: Builds a Trailmark graph and runs engine.preanalysis() to compute hotspots, taint, blast radius, and privilege boundaries.
Attack-surface-focused reporting: Produces attack-surface and complexity hotspot results with sampled subgraph data for investigation.
Use Case: When auditing an application during a Vivisect Phase 1 workflow, you can generate detailed taint/blast/privilege boundary context for a target directory to support audit triage.

Quick Start

Run trailmark-structural on your target directory to produce JSON output containing languages, summary, preanalysis results, attack surface, hotspots, and subgraph summaries.

Frequently Asked Questions about trailmark-structural

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I calculate the blast radius of a vulnerability in my codebase?▼

To calculate blast radius, you can generate a structural code graph and run preanalysis passes to map data flow and identify affected components. This approach uses taint analysis and privilege boundary discovery to show the potential impact scope of a vulnerability.

What is structural taint analysis for code auditing?▼

Structural taint analysis tracks how untrusted data flows through a codebase by building a graph of code structure and dependencies. It helps identify hotspots and privilege boundaries during security audits to prioritize vulnerability investigation.

How do I discover privilege boundaries when reviewing source code?▼

You can discover privilege boundaries by generating a deep structural graph of the target directory and running preanalysis. This process detects where trust levels change, revealing attack surface areas for detailed audit triage.

How do I map the attack surface of an unknown codebase?▼

Map the attack surface by parsing the target directory to detect supported languages and building a code graph. Running preanalysis passes produces attack-surface-focused reporting with complexity hotspots and sampled subgraph data for investigation.

Do I need Trailmark installed to run structural analysis?▼

Yes, you need Trailmark installed to run structural analysis. The skill uses Trailmark's parse API for language detection and graph building, and automatically reruns under uv if the initial Python import fails to handle dependencies.