trailofbits/trailmark
plugins/trailmark/skills/trailmark/SKILL.md
Builds and queries multi-language source code graphs for security analysis. Includes pre-analysis passes for blast radius, taint propagation, privilege boundaries, and entry point enumeration. Use when analyzing call paths, mapping attack surface, finding complexity hotspots, enumerating entry points, tracing taint propagation, measuring blast radius, or building a code graph for audit prioritization. Prefer `trailmark.parse.detect_languages()` or `--language auto` when the target language is unknown or polyglot.
Security scan in progress...
This may take a few minutes
Security Review in Progress
This skill is currently under security review. The content will be available once the security scan is complete and the skill is verified.
Related Skills
trailofbits/gh-cli
tools
VerifiedTrustedCommunity
Enforces authenticated gh CLI workflows over unauthenticated curl/WebFetch patterns. Use when working with GitHub URLs, API access, pull requests, or issues.
5,570SKILL.mdUpdated Jun 6, 2026
trailofbits/chrome-mcp-troubleshooting
tools
VerifiedTrustedCommunity
Diagnose and fix Claude in Chrome MCP extension connectivity issues. Use when mcp__claude-in-chrome__* tools fail, return "Browser extension is not connected", or behave erratically.
5,570SKILL.mdUpdated Jun 6, 2026
trailofbits/c-review
development
VerifiedTrustedCommunity
Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C/C++ applications, reviewing daemons or services for memory safety, or hunting integer overflow / use-after-free / race conditions in userspace code.
5,570SKILL.mdUpdated May 4, 2026
trailofbits/fuzzing-dictionary
development
VerifiedTrustedCommunity
Fuzzing dictionaries guide fuzzers with domain-specific tokens. Use when fuzzing parsers, protocols, or format-specific code.
5,570SKILL.mdUpdated Apr 26, 2026