---
title: "Audit Augmentation - Air Market"
description: "You have findings from several tools and a picture of how the code fits together, but they live in different places. This lays those findings onto the code graph by matching file and line, so you can…"
canonical: "https://airmarket.ai/app/audit-augmentation"
---

[Air Market](/) / [Security](/category/security) / Audit Augmentation

Skill by [Trail of Bits](/@trailofbits)

# Audit Augmentation

See scanner findings where they actually sit in the code

## What this does

You have findings from several tools and a picture of how the code fits together, but they live in different places. This lays those findings onto the code graph by matching file and line, so you can see them in context. Reach for it when an audit's results need to be read against the structure of the code.

### Top 3 things it does for you

- Put SARIF static analysis results onto a code graph
- Overlay weAudit annotations on the graph
- Group findings into subgraphs by severity

## Information

**Audit Augmentation at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [Trail of Bits](/@trailofbits) |
| Category | [Security](/category/security) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Size | 16 KB |
| Licence | CC-BY-SA-4.0 |
| Repository | [trailofbits/skills](https://github.com/trailofbits/skills/tree/09dfbd91537b888136c9203dca4ffdee5a595c69/plugins/trailmark/skills/audit-augmentation) |
| GitHub stars | 6,823 (as of Nov 2026) |
| Installs | 4,324, counted by skills.sh (Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of Audit Augmentation and flagged nothing. AIR's verdict: **safe**.

**What Audit Augmentation's check was run against**

|  |  |
| --- | --- |
| Commit | 09dfbd91537b888136c9203dca4ffdee5a595c69 |
| Content hash | b915126ced9f958a1bab6848ea103e747d6039045e5b1eea6b2cdb0b75ef7725 |
| Files read | [Browse the files at this exact commit](https://github.com/trailofbits/skills/blob/09dfbd91537b888136c9203dca4ffdee5a595c69/plugins/trailmark/skills/audit-augmentation/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for Audit Augmentation](/security/audit-augmentation)

## About Audit Augmentation

This augments Trailmark code graphs with external audit findings - SARIF static analysis results, weAudit annotation files, and version-gated Trailmark binary-analysis graph exports.

It maps findings to graph nodes by file and line overlap, creates severity-based subgraphs, and lets you cross-reference findings with pre-analysis data such as blast radius and taint.

Use it when projecting SARIF results onto a code graph, overlaying weAudit annotations, importing binary graph findings, cross-referencing Semgrep, CodeQL or binary-analysis findings with call graph data, or looking at audit findings in the context of code structure.

## What's inside

- SKILL.md - instructions
- agents/openai.yaml - data
- assets/trail-of-bits-mark.svg - template
- references/formats.md - reference

## Questions

### Is Audit Augmentation safe to install?

AIR scanned this exact version of Audit Augmentation and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit 09dfbd91537b, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/audit-augmentation.

### How do I install Audit Augmentation?

Open https://airmarket.ai/app/audit-augmentation on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/trailofbits/skills/tree/09dfbd91537b888136c9203dca4ffdee5a595c69/plugins/trailmark/skills/audit-augmentation. Install from that link, not the branch.

## Related on Air Market

- [More Security listings](/category/security)
- [Everything by Trail of Bits](/@trailofbits)

---

Canonical URL: <https://airmarket.ai/app/audit-augmentation>