Lightlines
By trailofbits

trailmark-finding-triage

trailofbits1.1k installs

Check a security finding with Trailmark evidence.

What it does

Assesses a candidate security issue with code-graph evidence to distinguish reachable code from an exploitable finding.

When to use it

Use to check a single finding's reachability, prioritize it before proof-of-concept work, or review a suspicious function.

How to use it

Give it a candidate security finding anchored in project code; it returns a triage verdict and an evidence packet.

What you provide

  • a file/line or function name
  • An existing project

Latest review

What you need · 4

Uses uv to run the bundled evidence helper for file/line findings.

The evidence helper requires Python 3.12 or later.

The evidence helper requires trailmark version >=0.5,<0.6, declared as a dependency for uv to provision.


Access · 1

This skill

trailmark

Execute

Installs trailmark for the helper