Skill: Debug Rule Reachability

Generate a fact reachability SARIF report to debug why a specific rule does (or doesn't) reach certain taint sinks.

Prerequisites

• Project built (build-project skill)
• Rule created and tested (create-rule, test-rule skills)

⚠️ CRITICAL: Single Rule Only

You MUST run the analyzer with exactly ONE rule via a single --rule-id flag. Running fact reachability across multiple rules will produce an enormously huge SARIF report that is effectively unusable.

Procedure

Run analysis with fact reachability debugging