skills.rest
marumo333
marumo333COMMUNITY
Explore all skills by this author →
GitHub

trailmark-structural

Runs trailmark structural analysis with blast radius, taint, privilege boundary, and complexity passes.

Updated Apr 5, 2026
Search Tags:#code analysis#security audit#structural analysis#blast radius#taint analysis#complexity hotspots#trailmark
One-click install
npx skills add https://github.com/marumo333/atrox --skill trailmark-structural-marumo333
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: trailmark-structural
Source: https://github.com/marumo333/atrox/tree/main/.claude/skills/trailofbits/plugins/trailmark/skills/trailmark-structural
Command: npx skills add https://github.com/marumo333/atrox --skill trailmark-structural-marumo333

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Security auditors need detailed structural data about a codebase before prioritizing review targets, but running individual analysis passes manually is slow and risks missing cross-referenced data like taint flows combined with blast radius. ## Core Features & Use Cases - Full Pre-Analysis Passes: Executes all four trailmark passes (blast radius, taint propagation, privilege boundaries, complexity hotspots) in one run. - Automatic Language Detection: Scans the target directory for source file extensions and maps the dominant one to the correct trailmark language flag across 16 languages including Rust, Solidity, Go, and C++. - Use Case: During Vivisect Phase 1 of a smart contract audit, point this Skill at the contracts directory to generate hotspot scores, tainted node lists, and privilege boundary data for audit prioritization. ## Quick Start Run full trailmark structural analysis on the target directory to get complexity hotspots, taint propagation, blast radius, and privilege boundary data.

Frequently Asked Questions about trailmark-structural

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a full structural analysis on a codebase with trailmark?▼

Run trailmark analyze with the --passes flag set to blast_radius,taint,privilege_boundary,complexity against your target directory. Detect the primary language first by counting source file extensions, then pass the matching --language flag.

What is the difference between trailmark structural analysis and summary analysis?▼

Structural analysis runs all four pre-analysis passes including taint, blast radius, and privilege boundaries, while summary analysis skips these and only gives a quick overview. Use structural analysis when detailed audit prioritization data is needed.

Which programming languages does trailmark structural analysis support?▼

It supports Rust, Python, Go, JavaScript, TypeScript, Solidity, C, C++, Ruby, PHP, C#, Java, Haskell, Erlang, Cairo, and Circom. The language is auto-detected from the most common file extension in the target directory.

What should I do if trailmark is not installed?▼

Report that trailmark is not installed and stop. Do not run pip install, uv pip install, git clone, or any other install command; the user must install trailmark themselves before running the analysis.

Why does a trailmark analysis pass return empty output?▼

Empty pass output is normal and does not mean the pass failed. Some codebases simply produce no data for certain passes, such as having no privilege boundaries, so the full output should be returned regardless.

Related Skills

Explore More Software Engineering Skills→
irrit-usirrit-us

trailmark-summary

Runs Trailmark summary analysis to detect languages, entry points, and dependencies in a codebase.

Official
Intermediate
trailofbitstrailofbits
6.5k

trailmark-structural

Analyze Trailmark code for hotspots, taint, blast radius, and privilege boundaries.

Official
Advanced
lyticslytics
4

profile-explorer

Assemble user profiles via identity lookup, segment checks, and event history.

Official
Advanced
dhaneshdhanesh
8

manifold-m-quick

Automate lightweight three-phase code change workflows for bug fixes and small features.

Community
Intermediate