Skip to content
SkillCheatSheet Sign in

graph-evolution

An AI agent skill from trailofbits/skills, scored 82 out of 100 by code and Verified.

82/ 100BVerified

Code score by group

  • Spec20/20
  • Description12/20
  • Procedure12/15
  • Done criteria13/15
  • Resources8/10
  • Scripts8/8
  • Safety7/7
  • Upkeep2/5

It loses the most points in Description (8), the group that checks whether the description says what the skill does and when to use it.

What the author says it does

Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-relevant structural changes. Detects new attack paths, complexity shifts, blast radius growth, taint propagation changes, and privilege boundary modifications that text diffs miss. Use when comparing code between commits or tags, analyzing structural evolution, detecting attack surface growth, reviewing what changed between audit snapshots, or finding security-relevant changes that text diffs miss.

This is the description in the skill's own SKILL.md, written by its author, not by SkillCheatSheet.

Repository
trailofbits/skills
Folder
plugins/trailmark/skills/graph-evolution
License
CC-BY-SA-4.0
GitHub stars
8,147
SKILL.md lines
353
Other files
5

Add graph-evolution to your agent

npx skills add trailofbits/skills --skill graph-evolution

The command uses the open skills CLI. A skill is instructions and scripts your agent will follow, so read it first: open the folder on GitHub at the commit that was scored.

Labelled for

More skills from trailofbits/skills

  1. cvss-scoring

    Produces CVSS v4.0 vector strings from plain-text vulnerability descriptions by systematically evaluating base metrics. Use when scoring a vulnerability, generating a CVSS vector,…

    Verified85A
  2. cosmos-vulnerability-scanner

    Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence. 25 core + 16 IBC + 10 EVM + 3 CosmWas…

    Verified84B
  3. codeql

    Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "build codeql database…

    Verified83B
  4. post-patch-validation

    Validates security patches with reproducible baseline-versus-patched evidence, including original exploits, root-cause variants, behavior preservation, regressions, and newly intr…

    Verified82B
  5. semgrep

    Runs a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every approved ruleset through scripts/run-sc…

    Verified82B
  6. yara-rule-authoring

    Guides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or optimizing YARA rules. Covers naming conventions, string select…

    Verified81B
  7. crypto-protocol-diagram

    Extracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), or Tamarin (.spthy) models and generates Mermaid sequenceDiagra…

    Verified80B
  8. sarif-parsing

    Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners. Triggers on "parse sarif", "read scan results", "aggregate findings", "dedupli…

    Verified80B

All skills in trailofbits/skills

Scores come from a snapshot of 300 public GitHub repositories taken on 12 November 2026. Every score is the result of fixed checks run by code; no AI is involved. How scoring works.