Trailmark Summary
Skill ActiveRuns a Trailmark summary analysis on a codebase. Returns auto-detected languages, entry point count, and dependency list. Use when vivisect or galvanize needs a quick structural overview. Triggers: trailmark summary, code summary, structural overview.
To provide a quick structural overview of a codebase by running a Trailmark summary analysis, aiding in early-stage code exploration and understanding.
Features
- Automated code summarization via Trailmark
- Auto-detection of programming languages
- Enumeration of entry points
- Listing of project dependencies
- Error handling for missing tools and incomplete analysis
Use Cases
- Obtain a quick structural overview before code decomposition
- Identify languages and entry points for initial codebase assessment
- Gain a fast orientation on unfamiliar codebases
Non-Goals
- Performing full structural analysis with all Trailmark passes
- Detailed code graph queries
- Providing hotspot scores or taint data
- Automated installation of the Trailmark tool
Trust
- warning:Issues AttentionOpen issues (13) significantly outnumber closed issues (4) in the last 90 days, indicating slow maintainer response.
Practical Utility
- info:Usage examplesThe SKILL.md outlines usage and execution steps but does not provide explicit, copy-pasteable end-to-end examples with claimed outputs.
Installation
First, add the marketplace
/plugin marketplace add trailofbits/skills/plugin install trailmark@trailofbitsQuality Score
Trust Signals
Similar Extensions
Lean Ctx
100Context Runtime for AI Agents — 59 MCP tools, 10 read modes, 95+ shell patterns, tree-sitter AST for 18 languages. Compresses LLM context by up to 99%. Use when reading files, running shell commands, searching code, or exploring directories. Auto-installs if not present.
Semgrep Rule Creator
100Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing Semgrep rules or building custom static analysis detections.
Metal
100Extract the conceptual essence of a repository as skills, agents, and teams — the project's roles, procedures, and coordination patterns expressed as agentskills.io-standard definitions. Reads an arbitrary codebase and produces generalized definitions that capture WHAT the project does and WHO operates it, without replicating HOW it does it. Use when onboarding to a new codebase and wanting to understand its conceptual architecture, when bootstrapping an agentic system from an existing project, when studying a project's organizational DNA for cross-pollination, or when creating a skill/agent/team library inspired by a reference implementation.
Pathfinder
100Map a codebase into feature-grouped flowcharts, identify duplicated concerns across features, and propose a unified architecture. Use when asked to "find the ideal path," unify duplicated systems, or audit architecture before a refactor. Emits a proposed unified flowchart plus per-system /make-plan prompts.
Codacy Audit
100Codacy Cloud workflow for this repository -- run Codacy's analyzers locally before `git push` (mirrors what Codacy CI runs), and fetch/cluster Codacy issues for any PR via the v3 API. Use when the user mentions Codacy, "codacy analysis", `codacy-analysis-cli`, "codacy issues on PR", "fix codacy CI", "codacy markdownlint findings", or any Codacy gate failing on a netdata-org PR. Ships scripts analyze-local.sh (docker/binary runner for codacy-analysis-cli) and pr-issues.sh (paginated v3 issue fetch + group-by tool/pattern/severity/file). Token-safe -- CODACY_TOKEN never reaches assistant-visible stdout. Read-only by design in the current SOW; write actions (mark FP, mark fixed) are deferred.
Domain Extract
100Extract domain knowledge from existing project sources and generate domain rules. Also handles vault sync and domain listing.