trailmark-review-gate
Runs a Trailmark structural review gate over a branch, pull request, fix commit, release diff, or git ref range to detect new entrypoints, new tainted paths, removed validation or authorization calls, privilege-boundary drift, blast-radius growth, complexity growth, and newly reachable sensitive sinks. Use when reviewing a PR, branch, remediation commit, or release diff where graph-level security regressions should be checked before merge.
npx skills add trailofbits/skills --skill trailmark-review-gate --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Trailmark Review Gate Apply deterministic security gate rules to Trailmark structural diff evidence. This skill does not replace line-level review. It produces a compact structural packet reviewers can cite while they inspect the code. ## When to Use - Reviewing a branch, pull request, release diff, or fix commit - Checking whether a change expands attack surface - Looking for removed validation or authorization on reachable paths - Comparing before/after taint, privilege-boundary, blast-radius, or complexity signals - Producing graph evidence for a differential review ## When NOT to Use - Single-snapshot analysis. Use `trailmark` or `trailmark-structural`. - Text-diff review only. Use `differential-review`. - Full vulnerability discovery. Use an audit or bug-finding workflow. - One static finding. Use `trailmark-finding-triage`. - Tooling is unavailable and the user wants manual review only. ## Rationalizations to Reject | Rationalization | Why It Is Wrong | Required Action | |---|---|---| | "The line diff is small, so no graph gate is needed" | Small changes can create new call paths | Compare before/after graphs | | "Graph gate passed, so the PR is secure" | The gate only chec
- When to Use
- When NOT to Use
- Rationalizations to Reject
- Workflow
- Step 1: Resolve Inputs
- Step 2: Build Graph Evidence
- Step 3: Normalize Changes
- Step 4: Apply Gate Rules
- Step 5: Emit Packet
- Requirements
What does the trailmark-review-gate skill do?
Runs a Trailmark structural review gate over a branch, pull request, fix commit, release diff, or git ref range to detect new entrypoints, new tainted paths, removed validation or authorization calls, privilege-boundary drift, blast-radius growth, complexity growth, and newly reachable sensitive sinks. Use when reviewing a PR, branch, remediation commit, or release diff where graph-level security regressions should be checked before merge.
How do I install it?
Run `npx skills add trailofbits/skills --skill trailmark-review-gate --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From trailofbits/skills, a repository with 6,426 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.