Audit Augmentation skill: what it does and how to install it
Augments Trailmark code graphs with SARIF, weAudit and binary-analysis findings, matching them to code nodes and creating severity-based subgraphs.
Summary generated from the skill's documentation.
Install
$ npx skills add trailofbits/skills --skill audit-augmentationRun it in a terminal. If your agent is already running, start a new session so it picks the skill up.
About this skill
What it does. Builds a Trailmark graph, runs pre-analysis, then imports SARIF, weAudit annotations or Trailmark 0.4+ binary graph exports. It matches findings to nodes by file and line overlap, creates severity and tool subgraphs, and supports queries and cross-referencing with blast radius, taint and privilege-boundary data.
When to use it. Use it to inspect static-analysis or human audit findings in code context, including Semgrep and CodeQL results. Do not use it to run analyses, build the graph or generate diagrams.
History
Repo stars
7.5kAbout +327 since 16 Jul 2026
Before 1 Oct 2026 the curve is estimated from public event data.
Stars are counted for the whole repository, which holds 67 skills.
Show as a table
| Date | Repo stars |
|---|---|
| 12 Oct 2026 | 7,491 |
| 11 Oct 2026 | 7,473 |
| 10 Oct 2026 | 7,457 |
| 9 Oct 2026 | 7,444 |
| 8 Oct 2026 | 7,427 |
| 7 Oct 2026 | 7,408 |
| 6 Oct 2026 | 7,389 |
| 5 Oct 2026 | 7,370 |
| 4 Oct 2026 | 7,355 |
| 3 Oct 2026 | 7,348 |
| 2 Oct 2026 | 7,340 |
| 1 Oct 2026 | 7,320 |
| 24 Sept 2026 (estimated) | 7,310 |
| 17 Sept 2026 (estimated) | 7,305 |
| 10 Sept 2026 (estimated) | 7,239 |
| 3 Sept 2026 (estimated) | 7,179 |
| 27 Aug 2026 (estimated) | 7,174 |
| 20 Aug 2026 (estimated) | 7,174 |
| 13 Aug 2026 (estimated) | 7,169 |
| 6 Aug 2026 (estimated) | 7,164 |
| 30 Jul 2026 (estimated) | 7,164 |
| 23 Jul 2026 (estimated) | 7,164 |
| 16 Jul 2026 (estimated) | 7,164 |
Installs
3.7k
Tracking since . A chart appears once there are 7 days of data.
Installs via skills.sh
Similar skills
- SARIF ParsingParses, aggregates and deduplicates SARIF files from static analysis tools such as CodeQL and Semgrep.
- Writing SkillsGuides creating, editing and testing skills before they are deployed.
- Debugging and Error RecoveryWalks the agent through root-cause debugging when tests fail, builds break or behaviour stops matching expectations.