trailmark-structural

Build a codebase graph to detect taint paths and attack surfaces.

Updated Nov 23, 2025
One-click install
npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill trailmark-structural-manuelbrandner85
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: trailmark-structural
Source: https://github.com/manuelbrandner85/Weltenbibliothekapp/tree/main/.agents/skills/trailmark-structural
Command: npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill trailmark-structural-manuelbrandner85

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires trailmark.

What problem does it solve?

This skill addresses the lack of visibility into complex codebases by automating the identification of security hotspots, taint paths, and privilege boundaries that manual review often misses.

Core Features & Use Cases

  • Structural Analysis: Builds a comprehensive graph of the target codebase to map internal relationships.
  • Security Auditing: Automatically detects taint paths, blast radius, and attack surfaces to prioritize remediation efforts.
  • Use Case: Use this during the initial phase of a security audit to identify high-risk components and privilege escalation paths within a large repository.

Quick Start

Run the trailmark-structural skill on the current directory to generate a full security analysis report.

Frequently Asked Questions about trailmark-structural

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security hotspots and taint paths in a large codebase?

Security hotspots and taint paths are identified by building a comprehensive graph of the codebase to map internal relationships and automatically detect attack surfaces. This process reveals high-risk components and privilege escalation paths.

What is structural analysis for code security auditing?

Structural analysis for code security auditing is the process of mapping internal code relationships to detect taint paths, blast radius, and privilege boundaries. It targets complex software projects to prioritize remediation efforts where manual review falls short.

Do I need any specific engine installed to run a structural analysis on my repository?

Yes, you need the Trailmark engine installed and accessible via the system path to run structural analysis on your repository. The engine executes the pre-analysis passes required to build the codebase graph.

When should I use automated codebase analysis over manual security review?

Automated codebase analysis is used over manual security review when you need to identify complex taint paths, blast radius, and privilege boundaries in large repositories. It provides visibility into attack surfaces that manual review often misses.

Can structural analysis detect privilege boundaries and blast radius in complex software projects?

Yes, structural analysis detects privilege boundaries and blast radius in complex software projects by executing pre-analysis passes on a code graph. This targets and maps high-risk components to identify potential privilege escalation paths.