skills.rest
adamatdevops
adamatdevopsCOMMUNITY
Explore all skills by this author →
GitHub

differential-review

Analyze code changes for security regressions and generate markdown reports.

1|Updated Jan 7, 2026
Search Tags:#security review#git history#blast radius#differential analysis#vulnerability reporting#adversarial modeling
One-click install
npx skills add https://github.com/adamatdevops/forge-works --skill differential-review-adamatdevops
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: differential-review
Source: https://github.com/adamatdevops/forge-works/tree/main/.skills/trailofbits/differential-review
Command: npx skills add https://github.com/adamatdevops/forge-works --skill differential-review-adamatdevops

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Differential security reviews can miss real risk when changes are small, familiarity biases the analysis, or teams skip hard evidence like git history, line numbers, and test gaps—this skill helps produce a complete, risk-first security review artifact for PRs and diffs.

Core Features & Use Cases

  • Risk-First Differential Review: Prioritizes auth, crypto, external calls, value transfer, and validation removal over change size.
  • Evidence-Based Findings: Uses git history and blamed removed code to support concrete, actionable security claims.
  • End-to-End Workflow & Reporting: Runs the full phase sequence (triage → analysis → test coverage → blast radius → adversarial for HIGH risk → report) and ensures the final markdown report artifact is generated.
  • Use Cases: Review security-sensitive PRs, analyze commit/diff regressions in critical code paths, and produce stakeholder-ready audit reports with severity and recommendations.

Quick Start

Use the differential-review skill to perform a full evidence-based security review of the changed code and generate the required markdown report for your PR or commit range.

Frequently Asked Questions about differential-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find security regressions in a pull request?▼

A differential security review identifies regressions in a pull request by prioritizing risk-first analysis of auth, crypto, and external calls, then generating a structured markdown report with specific line references and evidence.

What is blast radius calculation in vulnerability reporting?▼

Blast radius calculation in vulnerability reporting assesses the potential impact of security regressions by evaluating modified critical logic and applying adversarial modeling to quantify exploitability for high-risk findings.

How do I perform a differential security analysis on a git commit range?▼

To perform differential analysis on a git commit range, run a phase-based workflow covering triage, deep code analysis, test coverage assessment, blast-radius calculation, adversarial modeling for high risk, and mandatory structured markdown report generation.

Does differential security review work for varying codebase sizes?▼

Yes, differential security review applies to varying codebase sizes by prioritizing security-critical logic like auth and crypto over change size, using git blame and line references to support findings across small and large diffs.

How does adversarial modeling improve vulnerability reporting?▼

Adversarial modeling improves vulnerability reporting by simulating exploit scenarios against missing validations and removed logic in high-risk changes, producing evidence-backed severity ratings and actionable recommendations in the final markdown artifact.

Related Skills

Explore More Software Engineering Skills→
berkcangumusisikberkcangumusisik
11

git-blame-explain

Explain code line origins using git blame and commit history.

Community
Intermediate
thangvawnthangvawn

github-ops

Automate GitHub issue triage, pull request management, and CI/CD monitoring via gh CLI.

Community
Advanced
idchain-worldidchain-world
16

differential-review

Automate security-focused differential reviews of code changes with markdown reports.

Official
Advanced
zangjeicyzangjeicy

requesting-code-review

Scan git diffs for security vulnerabilities and quality regressions.

Community
Advanced