Trail of Bits Genotoxic

Genotoxic is a skill/plugin for the Trailmark platform that triages test quality findings by combining mutation testing and necessist (test statement removal analysis) with code graph analysis. It parses a target codebase to build a code graph, computes blast radius, entry points, privilege boundaries, and taint propagation, then cross-references this graph data with survived mutants from mutation testing frameworks and removed test statements from necessist. Using this combined data, it classifies findings into categories: false positives (dead code, cosmetic changes, equivalent mutants), missing unit tests (simple functions, error handling, boundary conditions), and fuzzing targets (high-complexity, entrypoint-reachable, parser/validator, or high blast-radius functions). Findings flagged by both mutation testing and necessist on the same function are marked as corroborated, high-confidence results. The tool runs as a workflow: building the code graph with trailmark, executing a language-specific mutation testing framework, optionally running necessist in parallel, and then triaging results using graph-informed decision rules. It is installed as a plugin in Claude Code and supports multiple languages including Python, Go, Rust, Solidity/Foundry, and TypeScript.