by trailhq
Turbocharge Claude Code, Cursor, Codex, Gemini & every coding agent: faster, cheaper, with contextual understanding specific to your codebase.
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
# Add to your Claude Code skills
git clone https://github.com/trailhq/Trail-CodeGuides for using ai agents skills like Trail-Code.
Last scanned: 10/14/2026
{
"issues": [
{
"type": "npm-audit",
"message": "argparse: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "gray-matter: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "js-yaml: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "sprintf-js: sprintf-js vulnerable to denial of service through unbounded precision specifiers",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "undici: undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression",
"severity": "high"
},
{
"file": "README.md",
"line": 370,
"type": "secret-exfiltration",
"message": "Instruction appears to send credentials/secrets to an external endpoint",
"severity": "medium"
}
],
"status": "WARNING",
"scannedAt": "2026-10-14T09:18:05.532Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how Trail-Code compares with popular alternatives.
| Metric | Cold Claude Code | Claude Code with graft |
|---|---|---|
| Tool-call reduction | Baseline | +46% |
| Token savings | Baseline | +42% |
| Time savings | Baseline | +60% |
| Correctness | 54% | 66% (+12 pts) |
graft grep / graft map)graft viz)npm install -g @trailhq/trail
trail init
claude
Install once. trail init asks which agents your team uses, builds the code map and wires up Claude Code. Then work the way you always do.
When a session works something out, your agent saves a learning: what it decided, what it ruled out, and what to watch out for. It goes in the repo's .trail/learnings/, and you commit it with the change. The next session on that code, yours or a teammate's, gets it back before it starts digging, and ends with a line saying what it saved, like 📝 Started from Anirudh's learning · saved ~27k tokens. Teammates' Claude reads the learnings even before they install trail, and learnings on a teammate's pushed branch show up before it merges, along with any overlap with your work.
Before a PR, trail check compares your change with what the team has learned and flags anything that goes against it. It runs on your machine; nothing to sign in to.
When you want the team's view across repos, your agent offers a link at the end of a reply. Sign in, create a workspace, tick the repos it gets, and invite your team with a link. The team page shows who is learning what, how often learnings are reused, and where work overlaps.
Trying this branch before @trailhq/trail is published:
git clone -b feat/trail-cloud https://github.com/trailhq/Graft.git trail && cd trail
npm install && npm run build && node scripts/pack-trail.mjs
npm install -g ./build/trail
npm install -g @nanonets/graft # install the CLI, once
graft init # build the graph + wire it into Claude Code
That is the whole setup. graft init asks which of your coding agents to wire up, builds graft/ from your code, and drops a statusline and hooks into .claude/, so from the next session on Graft rides along in Claude Code: it pulls the matching nodes into each prompt and rebuilds the graph in the background after every turn. No daemon, no re-indexing to remember, nothing to run or maintain by default — the graph is just files.
Nothing is written until you pick. Run graft init --dry-run to see every file it would touch first, or graft init --agents claude to skip the prompt and wire Claude Code alone.
graft build adds graft/ to your .gitignore automatically — the graph is a local, regenerable cache (like node_modules), not something you commit. What you share is the wiring init dropped into .claude/; each teammate runs graft build to generate their own graph:
git add .claude && git commit -m "wire in graft"
Prefer not to install globally? npx @nanonets/graft init works the same way.
Every task, your coding agent starts blind. Before it changes anything, it re-explores the repo: grep a term, open a file, follow an import, back out, try again. It is rebuilding a picture of a codebase it mapped an hour ago and threw away. That rediscovery burns most of a run's tool calls, tokens, and latency, and it is pure overhead:
Humans onboard to a codebase once. Agents onboard every single time.
Graft builds that understanding once and writes it into your repo as a folder of linked markdown files, one node per system, API, or concept.
graft build writes graft/ and adds it to .gitignore — it's a regenerable local cache, like node_modules. What you commit is the small wiring graft init drops in (.claude/, AGENTS.md, the MCP config); each teammate runs graft build to generate their own graph. No database, no server, no setup.$0, ~3ms when nothing moved — so ask/grep/callers/skeleton/map describe the code as it is right now, including uncommitted edits. graft check is a local freshness signal; there's no stale index to babysit.graft build, graft check) is deteTrail-Code is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by trailhq. Turbocharge Claude Code, Cursor, Codex, Gemini & every coding agent: faster, cheaper, with contextual understanding specific to your codebase. It has 9,984 GitHub stars.
Trail-Code returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/trailhq/Trail-Code" and add it to your Claude Code skills directory (see the Installation section above).
Trail-Code is primarily written in TypeScript. It is open-source under trailhq on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh Trail-Code against similar tools.
No comments yet. Be the first to share your thoughts!