# audit-augmentation

> Claude/Codex skill by [@trailofbits](https://omgskills.com/library/trailofbits/index.md) · 7.9k stars · Updated 2026-10-28

Augments Trailmark code graphs with external audit findings from SARIF static analysis results, weAudit annotation files, and version-gated Trailmark 0.4.x binary-analysis graph exports. Maps findings to graph nodes by file and line overlap, creates severity-based subgraphs, and enables cross-referencing findings with pre-analysis data (blast radius, taint, etc.). Use when projecting SARIF results onto a code graph, overlaying weAudit annotations, importing binary graph findings, cross-referencing Semgrep, CodeQL, or binary-analysis findings with call graph data, or visualizing audit findings in the context of code structure.

Tags: agent-skills

## Install

```sh
git clone https://github.com/trailofbits/skills /tmp/skills && ln -s /tmp/skills/plugins/trailmark/skills/audit-augmentation ~/.claude/skills/audit-augmentation
```

## From README

Audit Augmentation Projects findings from external tools (SARIF) and human auditors (weAudit) onto Trailmark code graphs as annotations and subgraphs. Trailmark 0.4.0+ can also import an external binary-analysis graph JSON export via engine.augmentbinary().

## Links

- HTML page: https://omgskills.com/library/trailofbits/skills/audit-augmentation/
- GitHub: https://github.com/trailofbits/skills
- Author: [@trailofbits](https://omgskills.com/library/trailofbits/index.md)

## More from this repo

- [address-sanitizer](https://omgskills.com/library/trailofbits/skills/address-sanitizer/index.md) — Builds and runs code under AddressSanitizer to catch buffer overflows, use-after-free, and other memory errors during...
   - [@trailofbits](https://omgskills.com/library/trailofbits/index.md) · 8.1k stars
- [aflpp](https://omgskills.com/library/trailofbits/skills/aflpp/index.md) — Sets up and runs AFL++ for multi-core fuzzing of C/C++ projects built with afl-clang-fast or afl-gcc-fast.
   - [@trailofbits](https://omgskills.com/library/trailofbits/index.md) · 7.9k stars
- [agentic-actions-auditor](https://omgskills.com/library/trailofbits/skills/agentic-actions-auditor/index.md) — Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action,...
   - [@trailofbits](https://omgskills.com/library/trailofbits/index.md) · 7.9k stars