
Graph Evolution
Builds code graphs at two git snapshots and diffs them structurally, not just textually. You get new attack paths, blast radius growth, taint propagation changes, and privilege boundary shifts that regular git diff won't show. It wraps Trailmark's graph analysis, runs pre-analysis on both snapshots, then combines native structural diff with subgraph membership changes. Use it when reviewing what changed between releases or audit snapshots, especially if you care about security evolution rather than just line changes. The workflow is explicit: git worktrees, graph builds, dual diff commands, then interpretation. It won't replace your text diff, but it catches the transitive complexity and call graph mutations you'd otherwise miss.
- skills.sh installs
- 4.2K
- GitHub stars
- 8.1K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add trailofbits/skills --skill graph-evolution --agent claude-codeInstalls into .claude/skills of the current project.
Files
Graph Evolution
Builds Trailmark code graphs at two source snapshots and computes a structural diff. Surfaces security-relevant changes that text-level diffs miss: new attack paths, complexity shifts, blast radius growth, taint propagation changes, and privilege boundary modifications.
When to Use
- Comparing two git refs to understand what structurally changed
- Auditing a range of commits for security-relevant evolution
- Detecting new attack paths created by code changes
- Finding functions whose blast radius or complexity grew silently
- Identifying taint propagation changes across refactors
- Pre-release structural comparison (tag-to-tag or branch-to-branch)
When NOT to Use
- Line-level code review (use
differential-reviewfor text-diff analysis) - Single-snapshot analysis (use the
trailmarkskill directly) - Diagram generation from a single snapshot (use the
diagramming-codeskill) - Mutation testing triage (use the
genotoxicskill)
Rationalizations to Reject
Sponsors
Details
- Repository
- github.com/trailofbits/skills
- Categories
- Security, Git & Pull Requests
- First seen
- May 16, 2026
More from trailofbits/skills
All 82- Mermaid To Proverif4.2K
- Genotoxic4.2K
- Vector Forge4.2K
- C Review4.1K
- Git Cleanup4K
- Debug Buttercup3.5K
- Designing Workflow Skills3.5K
- Seatbelt Sandboxer3.3K
- Chrome Mcp Troubleshooting2.7K
- Claude In Chrome Troubleshooting2.6K
- Rust Review2.4K
- Vulnerability Triage Brocards1.8K
- Open Sourcing1.7K
- Github Triage1.7K
- Slicing Code Context1.7K
- Fix Review400
- Using Gh Cli212
- Semgrep10.3K
- Differential Review10K
- Modern Python9.3K
- Supply Chain Risk Auditor9K
- Codeql8.8K
- Secure Workflow Guide7.8K
- Property Based Testing7.7K