differential-review

differential review

trailofbits 6.2k ↓ 5.1k CC-BY-SA-4.0 updated 28d ago
Claude Code
View source ↗

What it does

  • [ ] All changed files analyzed
  • [ ] Git blame on removed security code
  • [ ] Blast radius calculated for HIGH risk
  • [ ] Attack scenarios are concrete (not generic)
  • [ ] Findings reference specific line numbers + commits
  • [ ] Report file generated
  • [ ] User notified with summary

Requirements & configuration

  • ├─ Need detailed phase-by-phase methodology?
  • These patterns require adversarial analysis even in quick triage.

Derived from the skill's own SKILL.md documentation · extracted 2026-07-23

differential review

Source

Repository: https://github.com/trailofbits/skills

differential-review FAQ

What does the differential-review skill do?

> Performs security-focused differential review of code changes (PRs, commits, diffs). Adapts analysis depth to codebase size, uses git history for context, calculates blast radius, checks test coverage, and generates comprehensive markdown reports. Automatically detects and prevents security regressions. [ ] All changed files analyzed [ ] Git blame on removed security code

What does differential-review require?

├─ Need detailed phase-by-phase methodology? These patterns require adversarial analysis even in quick triage.

How do I install differential-review?

Run: npx -y skills add https://github.com/trailofbits/skills --skill differential-review --agent claude-code — the source lives at github.com/trailofbits/skills.

Maintain differential-review?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

differential-review on getagentictools
[![differential-review on getagentictools](https://getagentictools.com/badge/skills/trailofbits-skills-differential-review.svg)](https://getagentictools.com/skills/trailofbits-skills-differential-review?ref=badge)
npx agentictools info skills/trailofbits-skills-differential-review

The second line is the CLI lookup for this page — handy in READMEs and docs.