trailofbits avatar

Graph Evolution

Builds code graphs at two git snapshots and diffs them structurally, not just textually. You get new attack paths, blast radius growth, taint propagation changes, and privilege boundary shifts that regular git diff won't show. It wraps Trailmark's graph analysis, runs pre-analysis on both snapshots, then combines native structural diff with subgraph membership changes. Use it when reviewing what changed between releases or audit snapshots, especially if you care about security evolution rather than just line changes. The workflow is explicit: git worktrees, graph builds, dual diff commands, then interpretation. It won't replace your text diff, but it catches the transitive complexity and call graph mutations you'd otherwise miss.

skills.sh installs
4.2K
GitHub stars
8.1K
last updated
Aug 21, 2026

Install

$ npx -y skills add trailofbits/skills --skill graph-evolution --agent claude-code

Installs into .claude/skills of the current project.

Files

Graph Evolution

Builds Trailmark code graphs at two source snapshots and computes a structural diff. Surfaces security-relevant changes that text-level diffs miss: new attack paths, complexity shifts, blast radius growth, taint propagation changes, and privilege boundary modifications.

When to Use

  • Comparing two git refs to understand what structurally changed
  • Auditing a range of commits for security-relevant evolution
  • Detecting new attack paths created by code changes
  • Finding functions whose blast radius or complexity grew silently
  • Identifying taint propagation changes across refactors
  • Pre-release structural comparison (tag-to-tag or branch-to-branch)

When NOT to Use

  • Line-level code review (use differential-review for text-diff analysis)
  • Single-snapshot analysis (use the trailmark skill directly)
  • Diagram generation from a single snapshot (use the diagramming-code skill)
  • Mutation testing triage (use the genotoxic skill)

Rationalizations to Reject

Sponsors

Details

Repository
github.com/trailofbits/skills
Categories
Security, Git & Pull Requests
First seen
May 16, 2026

More from trailofbits/skills

All 82

Recommended

More Security
1yaklang avatarcode-obfuscation-deobfuscationyaklang/hack-skillsCode obfuscation analysis and deobfuscation playbook. Use when reversing binaries protected by junk code, opaque predicates, self-modifying code, control flow f4.2Kskills.sh installs
2ghostsecurity avatarghost-proxyghostsecurity/skillsStarts and controls the reaper MITM proxy to capture, inspect, search, and replay HTTP/HTTPS traffic between clients and servers. Capabilities include starting/4.2Kskills.sh installs
3agricidaniel avatarads-landingagricidaniel/claude-adsAudit paid-ad landing pages for message match, mobile experience, performance, accessibility, trust, forms, consent, tracking, security, and conversion friction4.2Kskills.sh installs
4giuseppe-trisciuoglio avatarspring-boot-openapi-documentationgiuseppe-trisciuoglio/developer-kitProvides patterns to generate comprehensive REST API documentation using SpringDoc OpenAPI 3.0 and Swagger UI in Spring Boot 3.x applications. Use when setting 4.2Kskills.sh installs
5assistant-ui avatarreact-mcpassistant-ui/skillsLets end users add, authenticate, and manage MCP servers from the browser in assistant-ui apps with @assistant-ui/react-mcp. Use when building user-managed MCP 4.2Kskills.sh installs
6agents365-ai avatarcreating-mermaid-diagramsagents365-ai/365-skillsGenerate Mermaid diagrams (.mmd) and export to PNG/SVG/PDF using mmdc CLI or Kroki API. USE THIS SKILL when user mentions diagram, flowchart, sequence diagram, 4.2Kskills.sh installs