--- name: data-flow-path description: Traced flow of data from source to sink through the program . Enables taint tracking , config value propagation tracing , and data provenance analysis argument-hint: [command] [source] [sink] allowed-tools: Read, Grep, Glob, Bash --- # DataFlowPath Traced flow of data from source to sink through the program . Enables taint tracking , config value propagation tracing , and data provenance analysis ## Commands ### trace Find all data flow paths between a source and sink symbol . Results as serialized JSON array of paths . **Arguments:** `$0` **source** (string), `$1` **sink** (string) ### traceFromConfig Trace all places a config value flows to . Results as serialized JSON array of paths . **Arguments:** `$0` **configKey** (string) ### traceToOutput Trace all data sources that contribute to a generated output file . Results as serialized JSON array of paths . **Arguments:** `$0` **output** (string) ### get Retrieve data flow path metadata . **Arguments:** `$0` **path** (W)