differential-review

Analyze git diffs and history to detect security regressions and generate markdown reports.

Updated Mar 2, 2026
One-click install
npx skills add https://github.com/FerranGuardia/claude-autonomous-setup --skill differential-review-ferranguardia
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: differential-review
Source: https://github.com/FerranGuardia/claude-autonomous-setup/tree/main/skills/security/differential-review
Command: npx skills add https://github.com/FerranGuardia/claude-autonomous-setup --skill differential-review-ferranguardia

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Analysts need to assess security implications of code changes across PRs and commits, ensuring regressions are identified with evidence-based context and a repeatable workflow.

Core Features & Use Cases

  • Triage and Phase-based Analysis: from Pre-Analysis to Phase 6, aligning with a structured workflow.
  • Evidence-driven Review: leverages git history, diff analysis, and blast radius to prioritize findings.
  • Adversarial Modeling & Reporting: builds concrete exploit scenarios and generates formal markdown reports.

Quick Start

Provide an initial differential review by loading the PR changes and the baseline context to generate a comprehensive report.

Frequently Asked Questions about differential-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security-focused code review on git diffs?

Security-focused code review on git diffs is performed by analyzing commit history and blast radius to detect regressions, building evidence-backed markdown reports with remediation recommendations.

What is blast radius analysis in the context of code diffs?

Blast radius analysis in code diffs measures the potential impact scope of changes by leveraging git history to prioritize security findings and identify regressions across the project.

How do I generate markdown reports for security regressions in pull requests?

Markdown reports for security regressions in pull requests are generated through phase-based differential analysis of code changes, producing formal evidence-driven documents with exploit scenarios and coverage details.

Can I use differential review for large scale codebases and complex commits?

Differential review can be used for large scale codebases and complex commits, adapting the analysis depth based on codebase complexity to ensure consistent security gap detection across varying project sizes.

Does adversarial modeling work with standard git history for vulnerability detection?

Adversarial modeling works with standard git history by analyzing code diffs and context to build concrete exploit scenarios, enabling evidence-backed vulnerability detection and regression identification.

What is the best way to triage security gaps in code commits?

The best way to triage security gaps in code commits is applying a structured phase-based analysis workflow from pre-analysis through adversarial modeling, leveraging evidence-driven diff context to prioritize findings.