domains / families / security / graph-evolution

graph-evolution

separate

Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-relevant structural changes. Detects new attack paths, complexity shifts, blast radius growth, taint propagation changes, and privilege boundary modifications that text diffs miss. Use when comparing code between commits or tags, analyzing structural evolution, detecting attack surface growth, reviewing what changed between audit snapshots, or finding security-relevant changes that text diffs miss.

When to use

• Comparing two git refs to understand what structurally changed
• Auditing a range of commits for security-relevant evolution
• Detecting new attack paths created by code changes
• Finding functions whose blast radius or complexity grew silently
• Identifying taint propagation changes across refactors
• Pre-release structural comparison (tag-to-tag or branch-to-branch)

When not to use

• Line-level code review (use `differential-review` for text-diff analysis)
• Single-snapshot analysis (use the `trailmark` skill directly)
• Diagram generation from a single snapshot (use the `diagramming-code` skill)
• Mutation testing triage (use the `genotoxic` skill)

Skill page

Source