Graph Evolution

Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-relevant structural changes. Detects new attack paths, complexity shifts, blast radius growth, taint propagation changes, and privilege boundary modifications that text diffs miss. Use when comparing c...

Overview

Graph Evolution is a SKILL.md-based agent skill sourced from trailofbits/skills. It is categorized under security and is listed for Claude Code, Claude. The source description focuses on: Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-relevant structural changes. Detects new attack paths, complexity shifts, blast radius growth, taint propagation changes, and privilege bound... AIToolly summarizes this page as a directory entry rather than copying the full third-party skill content, so users can evaluate the source, compatibility, and practical fit before installing it.

Use Cases

Evaluate Graph Evolution before adding it to an AI agent workflow.
Use Graph Evolution as a starting point for repeatable security tasks.
Compare Graph Evolution with related skills from skills and other GitHub repositories.

Install Notes

# Review source first
open https://github.com/trailofbits/skills/blob/main/plugins/trailmark/skills/graph-evolution/SKILL.md

Copy or clone the skill folder into your agent skills directory after reviewing its instructions and scripts.

Security Notes

Review the source SKILL.md, referenced scripts, permissions, and external services before installing Graph Evolution. Treat third-party skills like code dependencies, especially when they can read files, call APIs, or run commands.

Related Skills

Security And Hardening

addyosmani/agent-skills

Security

Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services.

typescriptjavascript
80,654 StarsMIT

Trailmark Summary

trailofbits/skills

Security

Runs a Trailmark summary analysis on a codebase. Returns auto-detected languages, entry point count, and dependency list. Use when vivisect or galvanize needs a quick structural overview. Triggers: trailmark summary, code summary, structural overview.

Claude CodeClaude
pythonsecurity
6,280 StarsSource linked

Cargo Fuzz

trailofbits/skills

Security

cargo-fuzz is the de facto fuzzing tool for Rust projects using Cargo. Use for fuzzing Rust code with libFuzzer backend.

Claude CodeClaude
securityresearch
6,280 StarsSource linked

Skill Improver

trailofbits/skills

Security

Iteratively reviews and fixes Claude Code skill quality issues until they meet standards. Runs automated fix-review cycles using the skill-reviewer agent. Use to fix skill quality issues, improve skill descriptions, run automated skill review loops, or iteratively refine a skill. Triggers on 'fix my skill', 'improve...

Claude CodeClaude
securityreview
6,280 StarsSource linked

Trailmark Structural

trailofbits/skills

Security

Runs full Trailmark structural analysis on Trailmark 0.2.x by building a graph, running `preanalysis()`, and reporting hotspots, taint, blast radius, privilege boundaries, and attack surface. Use when vivisect needs detailed structural data for a target. Triggers: structural analysis, blast radius, taint analysis, c...

Claude CodeClaude
pythonsecurity
6,280 StarsSource linked

Yara Rule Authoring

trailofbits/skills

Security

Guides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or optimizing YARA rules. Covers naming conventions, string selection, performance optimization, migration from legacy YARA, and false positive reduction. Triggers on: YARA, YARA-X, malware detection, thr...

Claude CodeClaude
designsecurity
6,280 StarsSource linked