trailmark-variant-neighborhood

name	trailmark-variant-neighborhood
description	Expands one confirmed or suspected vulnerability into a Trailmark graph neighborhood of variant candidates by finding sibling functions, shared callers and callees, common sensitive sinks, common entrypoint paths, interface implementations, override relationships, type/reference neighbors, and structurally similar nodes. Use after one issue is found to seed variant-analysis, semgrep-rule-creator, static-analysis, or manual review with graph-derived candidate locations.
allowed-tools	["Bash","Read","Grep","Glob","Write"]

Trailmark Variant Neighborhood

Expand one seed issue into graph-derived variant candidates. This skill generates review targets, not confirmed findings.

When to Use

• A finding is confirmed or plausible and variants may exist
• The vulnerable pattern depends on call context
• The issue involves a shared sink, source, validator, interface, override, trait, hook, handler, adapter, or critical type
• The next step is to seed variant-analysis, semgrep-rule-creator, static-analysis, or manual review

When NOT to Use

• No seed issue exists. Use discovery or triage first.
• The pattern is purely syntactic and already obvious. Use semgrep-rule-creator directly.
• The question is exploit-chain composition across multiple findings. Use a composition workflow.
• The goal is remediation verification. Use a remediation-review workflow.
• The seed cannot be bound to a graph node.

Rationalizations to Reject