Is genotoxic safe?

Graph-informed mutation testing triage. Parses codebases with Trailmark, runs mutation testing and necessist, then uses survived mutants, unnecessary test statements, and call graph data to identify false positives, missing test coverage, and fuzzing targets. Use when triaging survived mutants, analyzing mutation testing results, identifying test gaps, finding fuzzing targets from weak tests, running mutation frameworks (including circomvent and cairo-mutants), or using necessist.

Content hash

sha256:90b4a7df33e21bdc926d3f7aaf92c1e044628b9792e2be75e6442ac7c4184019

Files

6

Quality

100/100

Security findings

• lowInstalls code straight from a URLSL502 · plugins/trailmark/skills/genotoxic/references/mutation-frameworks.md:215
  go install github.com/go-gremlins/gremlins/cmd/gremlins@latest

  The dependency is fetched from a mutable URL or branch. Fix: Pin to a commit SHA or a published version with a checksum. Severity lowered: the line reads as documentation, not an instruction.

• lowInstalls code straight from a URLSL502 · plugins/trailmark/skills/genotoxic/references/mutation-frameworks.md:232
  go install github.com/zimmski/go-mutesting/cmd/go-mutesting@latest

  The dependency is fetched from a mutable URL or branch. Fix: Pin to a commit SHA or a published version with a checksum. Severity lowered: the line reads as documentation, not an instruction.

• infoRuns with elevated privilegesSL305 · plugins/trailmark/skills/genotoxic/references/mutation-frameworks.md:308
  `sudo apt-get install clang-<version>`.

  The skill uses sudo. Fix: Prefer user-level installs. If root is unavoidable, explain why next to the command. Severity lowered: the line reads as documentation, not an instruction.

• infoRuns with elevated privilegesSL305 · plugins/trailmark/skills/genotoxic/references/mutation-frameworks.md:345
  sudo mkdir -p /usr/local/bin /usr/local/lib

  The skill uses sudo. Fix: Prefer user-level installs. If root is unavoidable, explain why next to the command. Severity lowered: the line reads as documentation, not an instruction.

• infoRuns with elevated privilegesSL305 · plugins/trailmark/skills/genotoxic/references/mutation-frameworks.md:346
  sudo cp usr/local/bin/mull-runner-* /usr/local/bin/

  The skill uses sudo. Fix: Prefer user-level installs. If root is unavoidable, explain why next to the command. Severity lowered: the line reads as documentation, not an instruction.

• infoRuns with elevated privilegesSL305 · plugins/trailmark/skills/genotoxic/references/mutation-frameworks.md:347
  sudo cp usr/local/bin/mull-reporter-* /usr/local/bin/

  The skill uses sudo. Fix: Prefer user-level installs. If root is unavoidable, explain why next to the command. Severity lowered: the line reads as documentation, not an instruction.

• infoRuns with elevated privilegesSL305 · plugins/trailmark/skills/genotoxic/references/mutation-frameworks.md:348
  sudo cp usr/local/lib/mull-ir-frontend-* /usr/local/lib/

  The skill uses sudo. Fix: Prefer user-level installs. If root is unavoidable, explain why next to the command. Severity lowered: the line reads as documentation, not an instruction.

• infoRuns with elevated privilegesSL305 · plugins/trailmark/skills/genotoxic/references/mutation-frameworks.md:369
  | sudo -E bash

  The skill uses sudo. Fix: Prefer user-level installs. If root is unavoidable, explain why next to the command. Severity lowered: the line reads as documentation, not an instruction.

• infoRuns with elevated privilegesSL305 · plugins/trailmark/skills/genotoxic/references/mutation-frameworks.md:370
  sudo apt-get update

  The skill uses sudo. Fix: Prefer user-level installs. If root is unavoidable, explain why next to the command. Severity lowered: the line reads as documentation, not an instruction.

• infoRuns with elevated privilegesSL305 · plugins/trailmark/skills/genotoxic/references/mutation-frameworks.md:371
  sudo apt-get install mull-19 # match your LLVM version

  The skill uses sudo. Fix: Prefer user-level installs. If root is unavoidable, explain why next to the command. Severity lowered: the line reads as documentation, not an instruction.

• infoRuns with elevated privilegesSL305 · plugins/trailmark/skills/genotoxic/references/mutation-frameworks.md:376
  sudo dpkg -i Mull-19-*.deb

  The skill uses sudo. Fix: Prefer user-level installs. If root is unavoidable, explain why next to the command. Severity lowered: the line reads as documentation, not an instruction.

• infoRuns with elevated privilegesSL305 · plugins/trailmark/skills/genotoxic/references/mutation-frameworks.md:385
  | sudo -E bash

  The skill uses sudo. Fix: Prefer user-level installs. If root is unavoidable, explain why next to the command. Severity lowered: the line reads as documentation, not an instruction.

• infoRuns with elevated privilegesSL305 · plugins/trailmark/skills/genotoxic/references/mutation-frameworks.md:386
  sudo dnf install mull-20 # match your LLVM version

  The skill uses sudo. Fix: Prefer user-level installs. If root is unavoidable, explain why next to the command. Severity lowered: the line reads as documentation, not an instruction.

• infoRuns with elevated privilegesSL305 · plugins/trailmark/skills/genotoxic/references/mutation-frameworks.md:391
  sudo rpm -i Mull-20-*.rpm

  The skill uses sudo. Fix: Prefer user-level installs. If root is unavoidable, explain why next to the command. Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · plugins/trailmark/skills/genotoxic/references/mutation-frameworks.md:776
  slither-mutate . --test-cmd "npx hardhat test" --compile-force-framework hardhat

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.