differential-review

Solid

Security-focused differential code review with blast radius analysis, risk-adaptive depth (DEEP/FOCUSED/SURGICAL), git history correlation, and structured finding format. Adapted from Trail of Bits. Use when reviewing PRs, commits, or code changes for security implications.

Code & Development 496 stars 41 forks Updated 1 months ago MIT

Install

View on GitHub

Quality Score: 86/100

Stars 20%

Recency 20%

Frontmatter 20%

Documentation 15%

100

Issue Health 10%

License 10%

100

Description 5%

100

Skill Content

# Differential Review Security-focused code review that adapts depth to codebase size and change risk. Goes beyond style -- finds vulnerabilities, logic errors, and blast radius. ## Review Depth Modes ### DEEP (Small codebase, < 5K lines changed) - Line-by-line analysis of every changed file - Full control flow tracing through changed paths - Cross-reference every function call to its definition - Check all error paths and edge cases ### FOCUSED (Medium codebase, 5K-50K lines) - Prioritize files touching auth, crypto, input parsing, state mutation - Trace data flow from inputs to outputs through changed code - Skip cosmetic changes (formatting, comments, renames) - Deep-dive only on security-sensitive paths ### SURGICAL (Large codebase, > 50K lines) - Review only the diff, not surrounding code - Focus exclusively on: new attack surface, removed security controls, changed trust boundaries - Flag anything that needs a separate deep review ## Review Process ### Phase 1: Blast Radius Assessment Before reading any code: ```bash # What changed? git diff --stat <base>...<head> # How much changed? git diff --shortstat <base>...<head> # Which files are security-sensitive? git diff --name-only <base>...<head> | grep -iE '(auth|crypto|token|secret|permission|middleware|validator|sanitiz)' ``` Classify the change: - **Surface area**: How many files, functions, modules touched? - **Trust boundary crossing**: Does data flow between trust levels? - **Security control modification...

Details

Author: vibeeval
Repository: vibeeval/vibecosystem
Created: 2 months ago
Last Updated: 1 months ago
Language: C#
License: MIT

Integrates with

Anthropic · AI

Similar Skills

Semantically similar based on skill content — not just same category

Code & Development Solid

differential-review

Performs security-focused differential review of code changes (PRs, commits, diffs). Adapts analysis depth to codebase size, uses git history for context, calculates blast radius, checks test coverage, and generates comprehensive markdown reports. Automatically detects and prevents security regressions.

5,501 Updated 4 days ago

trailofbits

Code & Development Listed

differential-review

6 Updated yesterday

26zl

Code & Development Listed

differential-review

1 Updated 4 days ago

kevinvwong

Code & Development Solid

differential-review

Security-focused code review for PRs, commits, and diffs.

39,350 Updated today

sickn33

Code & Development Listed

code-review

Structured code review with blast radius analysis, security scanning, quality scoring, and a 30+ item checklist. TRIGGER when: user asks to review a PR, diff, changeset, or code for quality/security/breaking changes; user runs /review or /code-review; reviewing staged or committed changes. DO NOT TRIGGER when: writing new code from scratch, refactoring without review context, general debugging.

1 Updated 1 weeks ago

DROOdotFOO