Graph Evolution
Skill ActiveCompares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-relevant structural changes. Detects new attack paths, complexity shifts, blast radius growth, taint propagation changes, and privilege boundary modifications that text diffs miss. Use when comparing code between commits or tags, analyzing structural evolution, detecting attack surface growth, reviewing what changed between audit snapshots, or finding security-relevant changes that text diffs miss.
To provide security analysts with automated detection of security-relevant structural changes between code snapshots that traditional text diffs miss.
Features
- Compares Trailmark code graphs at two source code snapshots
- Surfaces security-relevant structural changes
- Detects new attack paths, complexity shifts, and privilege boundary modifications
- Automates graph building, pre-analysis, and structural diffing
- Generates security-focused markdown reports
Use Cases
- Comparing two git refs to understand structural changes
- Auditing commit ranges for security-relevant evolution
- Detecting new attack paths introduced by code changes
- Finding functions with increased blast radius or complexity
Non-Goals
- Line-level code review (use differential-review)
- Single-snapshot analysis (use trailmark skill directly)
- Diagram generation from a single snapshot (use diagramming-code skill)
Trust
- warning:Issues Attention13 issues were opened and 4 closed in the last 90 days, indicating a closure rate below 10% and slow maintainer response.
Installation
First, add the marketplace
/plugin marketplace add trailofbits/skills/plugin install trailmark@trailofbitsQuality Score
Trust Signals
Similar Extensions
Metal
100Extract the conceptual essence of a repository as skills, agents, and teams — the project's roles, procedures, and coordination patterns expressed as agentskills.io-standard definitions. Reads an arbitrary codebase and produces generalized definitions that capture WHAT the project does and WHO operates it, without replicating HOW it does it. Use when onboarding to a new codebase and wanting to understand its conceptual architecture, when bootstrapping an agentic system from an existing project, when studying a project's organizational DNA for cross-pollination, or when creating a skill/agent/team library inspired by a reference implementation.
Lean Ctx
100Context Runtime for AI Agents — 59 MCP tools, 10 read modes, 95+ shell patterns, tree-sitter AST for 18 languages. Compresses LLM context by up to 99%. Use when reading files, running shell commands, searching code, or exploring directories. Auto-installs if not present.
Pathfinder
100Map a codebase into feature-grouped flowcharts, identify duplicated concerns across features, and propose a unified architecture. Use when asked to "find the ideal path," unify duplicated systems, or audit architecture before a refactor. Emits a proposed unified flowchart plus per-system /make-plan prompts.
Codacy Audit
100Codacy Cloud workflow for this repository -- run Codacy's analyzers locally before `git push` (mirrors what Codacy CI runs), and fetch/cluster Codacy issues for any PR via the v3 API. Use when the user mentions Codacy, "codacy analysis", `codacy-analysis-cli`, "codacy issues on PR", "fix codacy CI", "codacy markdownlint findings", or any Codacy gate failing on a netdata-org PR. Ships scripts analyze-local.sh (docker/binary runner for codacy-analysis-cli) and pr-issues.sh (paginated v3 issue fetch + group-by tool/pattern/severity/file). Token-safe -- CODACY_TOKEN never reaches assistant-visible stdout. Read-only by design in the current SOW; write actions (mark FP, mark fixed) are deferred.
Domain Extract
100Extract domain knowledge from existing project sources and generate domain rules. Also handles vault sync and domain listing.
Auto Optimize
100Automate analysis, evaluation, design and optimization of target projects. Integrate VibeGuard as a baseline scan, the remediation process adheres to VibeGuard specifications, and a compliance check is run at the end. Support auto-run-agent autonomous execution.