Trailmark Variant Neighborhood

Expand one seed issue into graph-derived variant candidates. This skill generates review targets, not confirmed findings.

When to Use

• A finding is confirmed or plausible and variants may exist
• The vulnerable pattern depends on call context
• The issue involves a shared sink, source, validator, interface, override, trait, hook, handler, adapter, or critical type
• The next step is to seed variant-analysis, semgrep-rule-creator, static-analysis, or manual review

When NOT to Use