One-click install
npx skills add https://github.com/baskarajati/undangan --skill differential-review-baskarajati
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: differential-review
Source: https://github.com/baskarajati/undangan/tree/main/.agent/skills/differential-review
Command: npx skills add https://github.com/baskarajati/undangan --skill differential-review-baskarajati

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security teams often struggle to derive actionable insights from code changes. This skill provides a structured, evidence-based differential review of PRs, commits, and diffs, enabling consistent risk assessment and thorough reporting.

Core Features & Use Cases

  • Risk-first evaluation focusing on authentication, crypto, value transfer, and external calls.
  • Evidence-based analysis ties findings to git history, line-level context, and concrete attack scenarios.
  • Adaptive scope scales review depth to small, medium, or large codebases and produces comprehensive markdown reports.

Quick Start

Provide a complete differential review for a given change using the defined workflow to generate a markdown report.

Frequently Asked Questions about differential-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security-focused code review on a git diff?

To perform a security-focused code review on a git diff, you need to analyze authentication, crypto, and external calls within the changes. This approach ties findings to git history and line-level context to generate evidence-based risk reports.

What is the best way to assess the blast radius of code changes in a pull request?

Assessing the blast radius of code changes involves incorporating git history and test-coverage checks into your review. This evaluates the contextual impact of changes across the codebase to identify potential security vulnerabilities.

How do I generate markdown reports for security vulnerabilities found in commits?

Generating markdown reports for security vulnerabilities requires a structured workflow that evaluates diffs and incorporates adversarial considerations. This produces comprehensive markdown reports with actionable recommendations based on concrete attack scenarios.

Can I adapt the depth of security analysis for different sized codebases?

Yes, you can adapt the depth of security analysis for different sized codebases. The review process scales its depth according to whether the codebase is small, medium, or large, ensuring appropriate resource allocation for risk assessment.

Why should I use adversarial analysis when reviewing code diffs?

Using adversarial analysis when reviewing code diffs helps identify concrete attack scenarios by challenging the security assumptions of the changes. This enforces a structured workflow that produces formal reports with actionable, evidence-based recommendations.

Does differential review work without external dependencies?

Yes, differential review works without external dependencies. It relies entirely on the provided codebase changes, git history, and internal reasoning to evaluate risks and generate security reports without requiring additional software packages.