Trailmark
Builds multi-language source code graphs for security analysis: call graphs, attack surface mapping, blast radius, taint propagation, complexity hotspots, and entry point enumeration. Generates Mermaid diagrams (call graphs, class hierarchies, dependency maps, heatmaps). Compares code graph snapshots for structural diff and evolution analysis. Runs graph-informed mutation testing triage (genotoxic). Generates mutation-driven test vectors (vector-forge). Extracts crypto protocol message flows and converts Mermaid diagrams to ProVerif models. Projects SARIF and weAudit findings onto code graphs. Use when analyzing call paths, mapping attack surface, visualizing code architecture, triaging survived mutants, generating cryptographic test vectors, diagramming crypto protocols, formally verifying protocols, or augmenting audits with static analysis findings.
- Type
- plugin
- GitHub stars
- ★ 6K
- Repository
- trailofbits/skills
- Category
- —
Install
1Quick install (skills CLI)
npx skills add trailofbits/skills --skill trailmark --agent claude-codeInstalls trailmark into the current project's .claude/skills/ directory. Requires Node.js and the skills CLI.
2Manual install
Create ~/.claude/plugins/<name>/ and copy the SKILL.md file from the repository into it. The directory name must match the skill name.
⚠️ Exact file layout and requirements vary by repository — always check the repo README first.
Prefer the full source? The repository README is the authoritative install reference.