audit-augmentation
> Augments Trailmark code graphs with external audit findings from SARIF static analysis results, weAudit annotation files, and…
About
>
Augments Trailmark code graphs with external audit findings from SARIF static
analysis results, weAudit annotation files, and version-gated Trailmark 0.4.x
binary-analysis graph exports. Maps findings to graph nodes by
file and line overlap, creates severity-based subgraphs, and enables
cross-referencing findings with pre-analysis data (blast radius, taint, etc.).
Use when projecting SARIF results onto a code graph, overlaying weAudit
annotations, importing binary graph findings, cross-referencing Semgrep,
CodeQL, or binary-analysis findings with call graph data, or visualizing audit
findings in the context of code structure.
What it can do
- >
- Augments Trailmark code graphs with external audit findings from SARIF static
- analysis results, weAudit annotation files, and version-gated Trailmark 0.4.x
- binary-analysis graph exports. Maps findings to graph nodes by
- file and line overlap, creates severity-based subgraphs, and enables
- cross-referencing findings with pre-analysis data (blast radius, taint, etc.).
- Use when projecting SARIF results onto a code graph, overlaying weAudit
- annotations, importing binary graph findings, cross-referencing Semgrep,
- CodeQL, or binary-analysis findings with call graph data, or visualizi
Setup
- Install:
npx skills add trailofbits/skills --all - The skill auto-loads when relevant, or invoke it by name in your agent.
Prerequisites
A compatible AI coding agent (Claude Code, Cursor, etc.).
Use cases
Works with
Trust score — 9/10
Trail of Bits is a top-tier security research firm; their skills are professional-grade auditing and fuzzing playbooks used by their own engineers. Open source.
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.