
Genotoxic
Takes your mutation testing results and stops you from writing tests for the wrong reasons. It runs Trailmark to build a call graph, then cross-references survived mutants with code structure to sort them into false positives (dead code, logging strings), missing unit tests, or functions complex enough to need fuzzing instead. The necessist integration finds weak assertions by removing test statements to see what still passes. Honest take: mutation testing generates noise, and most teams either ignore it or waste time on harmless mutants. This actually triages the output using reachability and data flow, which is the only way to make mutation testing actionable at scale. Requires trailmark and a language-specific mutation framework installed upfront.
- skills.sh installs
- 4.2K
- GitHub stars
- 8.1K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add trailofbits/skills --skill genotoxic --agent claude-codeInstalls into .claude/skills of the current project.
Files
Genotoxic
Combines mutation testing and necessist (test statement removal) with code graph analysis to triage findings into actionable categories: false positives, missing unit tests, and fuzzing targets.
When to Use
- After mutation testing reveals survived mutants that need triage
- Identifying where unit tests would have the highest impact
- Finding functions that need fuzz harnesses instead of unit tests
- Prioritizing test improvements using data flow context
- Filtering out harmless mutants from actionable ones
- Finding unnecessary test statements that indicate weak assertions (necessist)
When NOT to Use
- Codebase has no existing test suite (write tests first)
- Pure documentation or configuration changes
- Single-file scripts with trivial logic
Prerequisites
Sponsors
Details
- Repository
- github.com/trailofbits/skills
- Category
- Testing & QA
- First seen
- May 16, 2026
More from trailofbits/skills
All 82- Vector Forge4.2K
- C Review4.1K
- Git Cleanup4K
- Debug Buttercup3.5K
- Designing Workflow Skills3.5K
- Seatbelt Sandboxer3.3K
- Chrome Mcp Troubleshooting2.7K
- Claude In Chrome Troubleshooting2.6K
- Rust Review2.4K
- Vulnerability Triage Brocards1.8K
- Open Sourcing1.7K
- Github Triage1.7K
- Slicing Code Context1.7K
- Fix Review400
- Using Gh Cli212
- Semgrep10.3K
- Differential Review10K
- Modern Python9.3K
- Supply Chain Risk Auditor9K
- Codeql8.8K
- Secure Workflow Guide7.8K
- Property Based Testing7.7K
- Sharp Edges7.6K
- Fp Check7.5K