Software Development
Trailmark
Builds and queries multi-language source and binary code graphs for security analysis. Includes pre-analysis passes for blast radius, taint propagation, privilege boundaries, entry point enumeration, proxy/unresolved-call tracking, type/reference queries, structural traversal, graph diffs, audit augmentation, declared cross-language/FFI/external links via `.trailmark/links.toml`, and SQL schema graphs. Use when analyzing call paths, mapping attack surface, finding complexity hotspots, enumerating entry points, tracing taint propagation, measuring blast radius, importing SARIF/weAudit/binary findings, linking source graphs across language or RPC boundaries, or building a code graph for audit prioritization. Feature-gate version-specific Trailmark APIs before using them; prefer `trailmark.parse.detect_languages()` or `--language auto` when the target language is unknown or polyglot.
- Publisher / source
- trailofbits/skills (found on skills.sh, an awesome list, the CSV list)
- Upstream record
- trailofbits/skills
- Version
- Version 3
- Published
- Publication review
- Approved for publication
- Content fingerprint
616e2272ed39e077add3ee7cb55454aa297ce573f1600b09fab1010b27c6f1ae