differential-review

Perform security-focused differential reviews of code changes and generate markdown reports.

77|3|Updated Mar 24, 2026
One-click install
npx skills add https://github.com/FlorianBruniaux/starmapper --skill differential-review-florianbruniaux
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: differential-review
Source: https://github.com/FlorianBruniaux/starmapper/tree/main/.claude/plugins/differential-review/skills/differential-review
Command: npx skills add https://github.com/FlorianBruniaux/starmapper --skill differential-review-florianbruniaux

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

differential-review provides a structured, repeatable process to perform security-focused differential reviews of code changes (PRs, commits, and diffs). It helps teams build baseline context, triage risk, analyze changed code in depth, assess blast radius, model adversarial scenarios, and generate formal markdown reports.

Core Features & Use Cases

  • Baseline context building: captures invariants, trust boundaries, and validation patterns to detect regressions.
  • Phase-driven analysis: codifies intake, triage, code analysis, test coverage, blast radius, deep context, and adversarial modeling.
  • Comprehensive reporting: outputs a complete audit-ready markdown report with concrete findings and recommended actions.
  • Integration-ready: designed to work with audit-context-building and issue-writer workflows for stakeholder communication.

Quick Start

Run the differential-review workflow on a PR to produce a complete security-focused audit report.

Frequently Asked Questions about differential-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security code review for a pull request?

Security differential code review analyzes code changes in PRs, commits, and diffs to detect security regressions. It builds baseline context, triages risk, assesses blast radius, and models adversarial attack scenarios to produce actionable findings.

How does a differential code review model attack scenarios?

Differential code review adapts its analysis depth based on code complexity, risk, and blast radius. It supports codebases of varying sizes by building baseline context and triaging risk before applying deep code analysis and adversarial modeling.

Can I use differential code review for commits across large codebases?

Differential code review outputs a complete audit-ready markdown report with concrete findings and recommended actions. It is designed to integrate with audit-context-building and issue-writer workflows for formal stakeholder communication.

What is the best way to detect security regressions in git commits?

Differential code review integrates with audit-context-building and issue-writer workflows. These integrations help capture baseline context and translate the final markdown report into actionable issues for stakeholder communication.

How do I generate a security audit report from a git diff?

Differential code review can be applied to individual commits, pull requests, and general diffs. It scales across codebases of varying sizes by adjusting the analysis depth based on the complexity and blast radius of the specific code changes.