Trailmark Finding Triage

Build a concise graph evidence packet for one candidate finding. This skill answers whether the affected code is reachable, what graph evidence supports or weakens the claim, and what manual review is still required before calling the issue exploitable.

When to Use

• Triage one static-analysis result before spending PoC time
• Check whether a manual finding is entrypoint-reachable
• Build an evidence packet for PoC work
• Review a single suspicious function discovered during manual audit
• Decide whether one issue should be promoted, deprioritized, or treated as part of a broader chain analysis

When NOT to Use