trailmark plugin
Builds source and binary code graphs for security analysis, context slicing, mutation testing, cryptographic protocol modeling, finding triage, and variant analysis.
How to install the trailmark plugin
Run both commands inside Claude Code. The first adds the marketplace once; the second installs the plugin.
/plugin marketplace add trailofbits/skills
/plugin install trailmark@trailofbitsWhat's inside trailmark
15 parts read from the plugin's own files.
Agents 1
Call as @agent-trailmark:name- @agent-trailmark:code-slice-worker
No description in the file.
Skills 14
Claude loads it when the task matches- audit-augmentation
Augments code graphs with external audit findings from SARIF, weAudit, and binary-analysis graph exports to enable cross-referencing with pre-analysis data.
- crypto-protocol-diagram
Generates Mermaid sequence diagrams with cryptographic annotations from source code, RFCs, academic papers, or formal models like ProVerif and Tamarin.
- diagramming-code
Generates Mermaid diagrams from code graphs to visualize call paths, class hierarchies, module dependencies, and data flows.
- genotoxic
Triages mutation testing results and test coverage gaps using code graph analysis and statement removal.
- graph-evolution
Compares code graphs between two source snapshots to detect security-relevant structural changes like new attack paths and privilege boundary modifications.
- mermaid-to-proverif
Translates Mermaid sequence diagrams of cryptographic protocols into ProVerif formal verification models for security property analysis.
- slicing-code-context
Selects bounded, graph-informed source code slices to delegate focused analysis or patch proposals to smaller subagents.
- trailmark
Builds and queries multi-language source and binary code graphs for security analysis, including taint propagation and blast radius estimation.
- trailmark-finding-triage
Performs graph-assisted triage of security findings to determine code reachability and build evidence packets for exploit validation.
- trailmark-review-gate
Runs structural security review gates over git diffs to detect regressions in attack surface, privilege boundaries, and sensitive sink reachability.
- trailmark-structural
Performs full structural analysis on a target directory to report hotspots, taint, blast radius, privilege boundaries, and attack surface data.
- trailmark-summary
Performs a structural analysis of a codebase to detect programming languages, entry points, and dependencies.
- trailmark-variant-neighborhood
Expands a single confirmed or suspected vulnerability into a graph-derived neighborhood of potential variant candidates for further analysis.
- vector-forge
Generates new cryptographic test vectors by using mutation testing to identify and target uncovered code paths in algorithm implementations.
Using trailmark in Claude Code
Ask for an agent by name:
@agent-trailmark:code-slice-workerSkills need no command. Claude reads them when your request matches what they describe.
Update, turn off or remove
- Update the plugin (shell)
- claude plugin update trailmark@trailofbits
- Refresh the marketplace
- /plugin marketplace update trailofbits
- Turn it off for now
- /plugin disable trailmark@trailofbits
- Remove it
- /plugin uninstall trailmark@trailofbits
Skills in trailmark
- trailmark-finding-triagetrailofbits/skills
Performs graph-assisted triage of security findings to determine code reachability and build evidence packets for exploit validation.
8 files8.1Kstars - trailmark-review-gatetrailofbits/skills
Runs structural security review gates over git diffs to detect regressions in attack surface, privilege boundaries, and sensitive sink reachability.
6 files8.1Kstars - trailmark-structuraltrailofbits/skills
Performs full structural analysis on a target directory to report hotspots, taint, blast radius, privilege boundaries, and attack surface data.
3 files8.1Kstars - trailmark-summarytrailofbits/skills
Performs a structural analysis of a codebase to detect programming languages, entry points, and dependencies.
3 files8.1Kstars - trailmark-variant-neighborhoodtrailofbits/skills
Expands a single confirmed or suspected vulnerability into a graph-derived neighborhood of potential variant candidates for further analysis.
6 files8.1Kstars - audit-augmentationtrailofbits/skills
Augments code graphs with external audit findings from SARIF, weAudit, and binary-analysis graph exports to enable cross-referencing with pre-analysis data.
4 files8.1Kstars - crypto-protocol-diagramtrailofbits/skills
Generates Mermaid sequence diagrams with cryptographic annotations from source code, RFCs, academic papers, or formal models like ProVerif and Tamarin.
11 files8.1Kstars - diagramming-codetrailofbits/skills
Generates Mermaid diagrams from code graphs to visualize call paths, class hierarchies, module dependencies, and data flows.
7 files8.1Kstars - genotoxictrailofbits/skills
Triages mutation testing results and test coverage gaps using code graph analysis and statement removal.
6 files8.1Kstars - graph-evolutiontrailofbits/skills
Compares code graphs between two source snapshots to detect security-relevant structural changes like new attack paths and privilege boundary modifications.
6 files8.1Kstars - mermaid-to-proveriftrailofbits/skills
Translates Mermaid sequence diagrams of cryptographic protocols into ProVerif formal verification models for security property analysis.
8 files8.1Kstars - slicing-code-contexttrailofbits/skills
Selects bounded, graph-informed source code slices to delegate focused analysis or patch proposals to smaller subagents.
8 files8.1Kstars - trailmarktrailofbits/skills
Builds and queries multi-language source and binary code graphs for security analysis, including taint propagation and blast radius estimation.
5 files8.1Kstars - vector-forgetrailofbits/skills
Generates new cryptographic test vectors by using mutation testing to identify and target uncovered code paths in algorithm implementations.
8 files8.1Kstars
trailmark plugin questions
How do I install the trailmark plugin?
In Claude Code run /plugin marketplace add trailofbits/skills, then /plugin install trailmark@trailofbits.
What does the trailmark plugin include?
trailmark bundles 1 agent, 14 skills.
Which agents come with trailmark?
code-slice-worker. Call one with @agent-trailmark:code-slice-worker.
How do I update or remove the trailmark plugin?
Update it with claude plugin update trailmark@trailofbits in your shell, or from the Installed tab of /plugin. Remove it with /plugin uninstall trailmark@trailofbits.