CODE MAINTENANCE / Trail of Bits
Dimension propagator
Propagates dimensional comments through assigned files, refuses executable edits, and reports mismatches instead of fixing them.
“Adds comment annotations on every assigned file, leaves executable code unchanged, and reports a mismatch instead of fixing it.”
01 / THE REASONING
Why this made the selection.
- It requires a status for every assigned file and says not to skip a file silently.
- It says to add comments only, not to change executable code, and not to overwrite an existing anchor annotation when an inference conflicts.
02 / THE REVIEW RECORD
What we actually inspected.
Source review has boundaries.
A clear record is more useful than a “safe” badge.
Material inspected
- plugins/dimensional-analysis/agents/dimension-propagator.md
- plugins/dimensional-analysis/README.md
- README.md
- LICENSE
Our findings
- It must process every assigned file and return propagated, reviewed with no propagation changes, or blocked with a reason. It says not to skip silently.
- It says to add comments only and never modify executable code, including not fixing a bug it notices while propagating.
- It says not to change arithmetic, function logic, control flow, or variable assignments, and not to add or remove scaling.
- It says never to overwrite an existing step-2 annotation. A conflicting inference is reported as a mismatch and the existing annotation is left in place.
- Its mismatch scale includes a missing or wrongly directed scaling factor and inconsistent return paths. Those are reports. It calls the later validator the full check and does not claim to be that pass.
Not established by this review
- The resource was not executed and its tools were not called.
- No source file was annotated.
- dimension-algebra.md and the dimensional-analysis skill were not opened.
The review applies to the material and revision named here. A newer upstream release can change its behavior.
03 / PUT IT TO WORK
Use the role in your project.
DOCUMENTED COMMAND
/plugin marketplace add trailofbits/skillsCopying does not execute this command. It may retrieve a newer version than the reviewed source.
- The repository README at this pin shows /plugin marketplace add trailofbits/skills as one unindented line. That line adds the marketplace, not this agent.
- The dimensional-analysis README names dimension-propagator as the propagation step. It shows no install line.
- The same root README shows /plugin menu for browsing plugins. It does not name this file.
Before you start
- Claude Code, which is the host the marketplace README documents
- A dispatch that supplies the units file, the assigned paths, and the earlier anchor annotations this file says it expects
04 / FOLLOW THE EVIDENCE
The source trail.
Our notes are separate from the original resource.
Check upstream before adopting a new version.
- dimension-propagator ↗Checked
https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/dimensional-analysis/agents/dimension-propagator.md
Supports: per-file status, comments-only edits, and mismatch reports without overwriting anchors
- Repository root LICENSE ↗Checked
https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE
Supports: CC-BY-SA-4.0 Attribution-ShareAlike 4.0 International
https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/dimensional-analysis/README.md
Supports: full-auto mode with no approval gate, and this agent's place in the workflow
- Repository README ↗Checked
https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/README.md
Supports: marketplace install line and the same CC-BY-SA-4.0 statement