differential-review
Performs security-focused differential review of code changes. Adapts analysis depth to codebase size, uses git blame for context, calculates blast radius by counting callers, checks test coverage of modified code, and generates a markdown report. Use when reviewing a PR, commit, or diff for security vulnerabilities, checking whether a change re-introduces a previously fixed bug, asking what else a change could break, or finding which modified code has no test covering it.
Pinned to revision 768a93096fb1, so it is the text this page describes rather than whatever the author pushed since.
Pre-approved tools experimental
Experimental field. Support varies between clients, so this list is what the author declared, not what your client will enforce.
- Read
- Write
- Grep
- Glob
- Bash
Files
- skills/differential-review/SKILL.md
- skills/differential-review/UPSTREAM-LICENSE.txt
- skills/differential-review/adversarial.md
- skills/differential-review/agents/openai.yaml
- skills/differential-review/assets/trail-of-bits-mark.svg
- skills/differential-review/methodology.md
- skills/differential-review/patterns.md
- skills/differential-review/reporting.md
Every link opens the file at its source, pinned to the revision this page describes.