Trailmark Structural
技能 已验证 活跃Runs full Trailmark structural analysis on Trailmark 0.2.x by building a graph, running `preanalysis()`, and reporting hotspots, taint, blast radius, privilege boundaries, and attack surface. Use when vivisect needs detailed structural data for a target. Triggers: structural analysis, blast radius, taint analysis, complexity hotspots.
To provide detailed structural data from Trailmark analysis for security auditing and in-depth code understanding when vivisect requires it.
功能
- Runs full Trailmark structural analysis
- Reports hotspots, taint, blast radius, privilege boundaries, and attack surface
- Detects languages and builds analysis engine
- Outputs structured JSON containing analysis results
使用场景
- When detailed structural data is needed for vivisection
- For generating complexity and taint data for audit prioritization
- To perform pre-analysis passes for a specific target scope
非目标
- Providing only a quick overview (use `trailmark-summary` instead)
- Performing ad-hoc code graph queries (use the main `trailmark` skill)
- Analyzing single small files where structural analysis adds no value
安装
请先添加 Marketplace
/plugin marketplace add trailofbits/skills/plugin install trailmark@trailofbits质量评分
已验证类似扩展
Metal
100Extract the conceptual essence of a repository as skills, agents, and teams — the project's roles, procedures, and coordination patterns expressed as agentskills.io-standard definitions. Reads an arbitrary codebase and produces generalized definitions that capture WHAT the project does and WHO operates it, without replicating HOW it does it. Use when onboarding to a new codebase and wanting to understand its conceptual architecture, when bootstrapping an agentic system from an existing project, when studying a project's organizational DNA for cross-pollination, or when creating a skill/agent/team library inspired by a reference implementation.
Lean Ctx
100AI 代理的上下文运行时 — 包含 59 个 MCP 工具、10 种读取模式、95+ 种 shell 模式、支持 18 种语言的 tree-sitter AST。将 LLM 上下文压缩高达 99%。用于读取文件、运行 shell 命令、搜索代码或探索目录。如果不存在，则自动安装。
Pathfinder
100将代码库映射为按功能分组的流程图，识别不同功能之间的重复关注点，并提出统一的架构。在被要求“寻找理想路径”、统一重复系统或在重构前审计架构时使用。输出一个建议的统一流程图以及针对每个系统的“制定计划”提示。
Codacy Audit
100Codacy Cloud workflow for this repository -- run Codacy's analyzers locally before `git push` (mirrors what Codacy CI runs), and fetch/cluster Codacy issues for any PR via the v3 API. Use when the user mentions Codacy, "codacy analysis", `codacy-analysis-cli`, "codacy issues on PR", "fix codacy CI", "codacy markdownlint findings", or any Codacy gate failing on a netdata-org PR. Ships scripts analyze-local.sh (docker/binary runner for codacy-analysis-cli) and pr-issues.sh (paginated v3 issue fetch + group-by tool/pattern/severity/file). Token-safe -- CODACY_TOKEN never reaches assistant-visible stdout. Read-only by design in the current SOW; write actions (mark FP, mark fixed) are deferred.
Domain Extract
100Extract domain knowledge from existing project sources and generate domain rules. Also handles vault sync and domain listing.
Auto Optimize
100自动化分析、评估、设计和优化目标项目。将 VibeGuard 集成作为基线扫描，修复过程遵循 VibeGuard 规范，并在最后运行合规性检查。支持 auto-run-agent 自主执行。