SkillCheatSheet
trailmark-variant-neighborhood
An AI agent skill from trailofbits/skills, scored 57 out of 100 by code.
Code score by group
It loses the most points in Done criteria (15), the group that checks whether there is a checklist and a step that verifies the work.
What the author says it does
Expands one confirmed or suspected vulnerability into a Trailmark graph neighborhood of variant candidates by finding sibling functions, shared callers and callees, common sensitive sinks, common entrypoint paths, interface implementations, override relationships, type/reference neighbors, and structurally similar nodes. Use after one issue is found to seed variant-analysis, semgrep-rule-creator, static-analysis, or manual review with graph-derived candidate locations.
This is the description in the skill's own SKILL.md, written by its author, not by SkillCheatSheet.
- Repository
- trailofbits/skills
- Folder
- plugins/trailmark/skills/trailmark-variant-neighborhood
- License
- CC-BY-SA-4.0
- GitHub stars
- 8,147
- SKILL.md lines
- 110
- Other files
- 5
Add trailmark-variant-neighborhood to your agent
npx skills add trailofbits/skills --skill trailmark-variant-neighborhoodThe command uses the open skills CLI. A skill is instructions and scripts your agent will follow, so read it first: open the folder on GitHub at the commit that was scored.
More skills from trailofbits/skills
-
cvss-scoring
Produces CVSS v4.0 vector strings from plain-text vulnerability descriptions by systematically evaluating base metrics. Use when scoring a vulnerability, generating a CVSS vector,…
Verified85A -
cosmos-vulnerability-scanner
Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence. 25 core + 16 IBC + 10 EVM + 3 CosmWas…
Verified84B -
codeql
Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "build codeql database…
Verified83B -
graph-evolution
Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-relevant structural changes. Detects new attack paths, complexi…
Verified82B -
post-patch-validation
Validates security patches with reproducible baseline-versus-patched evidence, including original exploits, root-cause variants, behavior preservation, regressions, and newly intr…
Verified82B -
semgrep
Runs a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every approved ruleset through scripts/run-sc…
Verified82B -
yara-rule-authoring
Guides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or optimizing YARA rules. Covers naming conventions, string select…
Verified81B -
crypto-protocol-diagram
Extracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), or Tamarin (.spthy) models and generates Mermaid sequenceDiagra…
Verified80B
All skills in trailofbits/skills
Scores come from a snapshot of 300 public GitHub repositories taken on 12 November 2026. Every score is the result of fixed checks run by code; no AI is involved. How scoring works.