Skip to main content
skill CX Codex

trailmark-summary — Claude Code skill: codebase overview

This skill runs trailmark analyze --summary against a target directory and reports detected languages, entry point count and dependencies.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓
npx skills add trailofbits/skills --skill trailmark-summary -a claude-code
Open on GitHub

What trailmark-summary does

One pass over a directory gives you three things: the languages Trailmark detected through its parser, a line starting with Entrypoints:, and a line starting with Dependencies:. That is enough orientation before you start reading files in a repo you have never seen.

The workflow has four steps. First it checks whether trailmark is reachable, either directly or through uv run. Then it calls trailmark.parse.detect_languages — on 0.2.x builds the same function sits in trailmark.query.api. After that comes trailmark analyze --language auto --summary {args}. The last step is verification: if any of the three blocks is absent, the skill reports the gap instead of filling it in.

Installing Trailmark is on you. The skill never runs pip install, uv pip install or git clone. No trailmark in the environment means nothing happens at all. For a full pass with hotspot scores or taint data, reach for trailmark-structural instead — this one stops at the summary.

What it helps with

  • list languages in an unfamiliar repository
  • count entry points before decomposition
  • collect the dependency list of a project
  • get oriented in someone else's code before deep analysis
  • check whether Trailmark sees the project at all

Example prompts for the agent

  • Run a trailmark summary over the src directory
  • Give me a structural overview of this project with the detected languages
  • Run trailmark-summary, I need entry points and dependencies

How to install trailmark-summary

1Skills CLI (Vercel)

npx skills add trailofbits/skills --skill trailmark-summary -a claude-code

2Manually: put the files in place

~/.claude/skills/trailmark-summary/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/trailmark-summary/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about trailmark-summary

How do I install trailmark-summary in Claude Code?

Run npx skills add trailofbits/skills --skill trailmark-summary -a claude-code. The skill file lands at ~/.claude/skills/trailmark-summary/SKILL.md.

What does trailmark-summary do?

It runs trailmark analyze --language auto --summary on the target directory and returns the detected languages, the entry point count and the dependency list.

Do I need anything installed before using it?

Yes, Trailmark itself. The skill only checks that it is present and runs no install commands of its own.

Similar skills

All skills for Agent setup: memory, context, orchestration →

From the same set77

trailmark Builds and inspects multi-language code graphs to trace taint propagation, map attack surfaces, and prioritize security audits. CX Codex +1 4,000installs mermaid-to-proverif Turns a Mermaid sequence diagram of a crypto protocol into a ProVerif model — a .pv file you can check for secrecy, authentication and forward secrecy. CX Codex +1 3,900installs graph-evolution Compares Trailmark code graphs across two code snapshots to spot structural security changes. It catches attack path expansion and privilege shifts that text diffs overlook. CX Codex +1 3,900installs trailmark-structural Builds a Trailmark graph for a target directory and reports complexity, taint, blast radius, privilege boundaries, and attack surface data. CX Codex +1 3,900installs audit-augmentation Projects SARIF static analysis reports, weAudit notes, and binary graphs onto Trailmark code graphs. Useful when mapping vulnerabilities to call graphs and data taint paths. CX Codex +1 3,900installs crypto-protocol-diagram Reads protocol code or a spec and writes a Mermaid sequenceDiagram with crypto annotations, plus an ASCII diagram in the reply. CX Codex +1 3,900installs vector-forge This skill uses mutation testing to find gaps in tests for cryptographic implementations and propose vectors for uncovered cases. Use it to assess an existing test suite. CX Codex +1 3,800installs genotoxic Sorts survived mutants into false positives, missing unit tests and fuzzing targets, using a code graph built with Trailmark. CX Codex +1 3,800installs

Project sponsors

Companies that keep this analytics open
Gold sponsor

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor