differential-review

Perform security-focused differential review of code changes with git history and markdown reports.

Updated Jan 24, 2026
One-click install
npx skills add https://github.com/amano--/call-center --skill differential-review-amano
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: differential-review
Source: https://github.com/amano--/call-center/tree/main/.gemini/antigravity/skills/trailofbits-security/differential-review
Command: npx skills add https://github.com/amano--/call-center --skill differential-review-amano

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the process of performing security-focused code reviews on changes like Pull Requests or commits, ensuring that no new vulnerabilities are introduced and that existing security measures are maintained.

Core Features & Use Cases

  • Security Regression Detection: Automatically identifies if security fixes are undone or if new vulnerabilities are introduced.
  • Risk-Based Analysis: Adapts the depth of review based on the risk level of the code changes and the overall codebase size.
  • Comprehensive Reporting: Generates detailed markdown reports outlining findings, attack scenarios, and recommendations.
  • Use Case: Before merging a critical code update to a smart contract, use this Skill to perform a deep security audit, ensuring no new exploits are possible and that all previous security patches remain effective.

Quick Start

Use the differential review skill to analyze the changes in the current commit range.

Frequently Asked Questions about differential-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security review for git diff changes?

Automate security review for git diff changes by performing differential analysis on commits. The process leverages git history to calculate blast radius, check test coverage, and generate markdown reports to detect security regressions and new vulnerabilities.

What is differential code analysis for vulnerability detection?

Differential code analysis for vulnerability detection is a method that reviews code changes against git history to identify if security fixes are undone. It adapts review depth based on codebase size and risk to prevent regressions in critical updates like smart contract deployments.

How do I prevent security regressions before merging a pull request?

Prevent security regressions before merging a pull request by running a risk-based differential review. This evaluates the blast radius of code changes, checks existing test coverage, and outlines attack scenarios in a comprehensive markdown report to ensure no new exploits are possible.

Does smart contract security review work with large codebases?

Smart contract security review adapts to large codebases by scaling the analysis depth based on risk level. It leverages historical git context and blast radius calculations to focus vulnerability detection efforts efficiently on the most critical code changes.

What is the best way to check if a code change introduces new vulnerabilities?

The best way to check if a code change introduces new vulnerabilities is to perform a security-focused differential review. This compares recent commits against historical baselines, calculates the blast radius, and generates detailed markdown reports outlining findings and recommendations.

When should I use automated code audit over manual review?

Use automated code audit over manual review when analyzing frequent pull requests or large codebases. It systematically evaluates git diffs, calculates blast radius, and checks test coverage to detect security regressions consistently before merging critical updates.