trailmark
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions and patterns for using trailmark, a legitimate security analysis tool developed by Trail of Bits. All identified external resources and behaviors align with the skill's stated purpose of facilitating code graph analysis.
- [COMMAND_EXECUTION]: The skill instructs the agent to install the trailmark CLI tool using 'uv tool install trailmark' and to execute Python snippets using 'uv run'. These commands are necessary for the tool's operation within its intended environment.
- [EXTERNAL_DOWNLOADS]: Tool installation and execution via the 'uv' package manager will fetch the trailmark package from standard, trusted registries.
- [INDIRECT_PROMPT_INJECTION]: The tool parses source code from a user-provided directory. While the ingested code represents an untrusted data source, the risk is inherent to the tool's primary function as a code analyzer and is mitigated by the agent's role as the consumer of the analysis results.
Audit Metadata