domains / families / security / trailmark-variant-neighborhood

trailmark-variant-neighborhood

separate

Expands one confirmed or suspected vulnerability into a Trailmark graph neighborhood of variant candidates by finding sibling functions, shared callers and callees, common sensitive sinks, common entrypoint paths, interface implementations, override relationships, type/reference neighbors, and structurally similar nodes. Use after one issue is found to seed variant-analysis, semgrep-rule-creator, static-analysis, or manual review with graph-derived candidate locations.

When to use

• A finding is confirmed or plausible and variants may exist
• The vulnerable pattern depends on call context
• The issue involves a shared sink, source, validator, interface, override,
• The next step is to seed `variant-analysis`, `semgrep-rule-creator`,

When not to use

• No seed issue exists. Use discovery or triage first.
• The pattern is purely syntactic and already obvious. Use
• The question is exploit-chain composition across multiple findings. Use a
• The goal is remediation verification. Use a remediation-review workflow.
• The seed cannot be bound to a graph node.

Skill page

Source