differential-review

Identify security-relevant changes in git diffs and generate a structured review report.

2|Updated Apr 3, 2026

Search Tags:#security #vulnerability #diff #static-analysis #code-review #semgrep #surface-classification

Ready to run

npx skills add https://github.com/kscius/KS-Cursor-Orchestrator --skill differential-review-kscius

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: differential-review
Source: https://github.com/kscius/KS-Cursor-Orchestrator/tree/main/skills/differential-review
Command: npx skills add https://github.com/kscius/KS-Cursor-Orchestrator --skill differential-review-kscius

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill helps security teams and engineers quickly assess changes in code diffs for potential vulnerabilities, misconfigurations, and surface exposures, enabling faster safe merges.

Core Features & Use Cases

Surface classification of changed files using a predefined taxonomy.
Targeted static analysis with Semgrep on the diff scope.
Produce a structured security review report suitable for PR gates or audit records.

Quick Start

Review a diffset by loading the changes from a PR and run the surface-aware review workflow.

Frequently Asked Questions about differential-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I review code diffs for security vulnerabilities before merging?▼

To review code diffs for security vulnerabilities, the skill analyzes changed files in pull requests or feature branches to surface potential exposures. It classifies changed surfaces using a predefined taxonomy and applies targeted Semgrep static analysis to produce a structured security report.

What is surface classification in static analysis code review?▼

Surface classification in static analysis code review is categorizing changed files using a predefined surfaces taxonomy. It helps security teams quickly assess potential vulnerabilities and misconfigurations by focusing the review only on the specific surface areas exposed by the code diff.

How do I run Semgrep static analysis on a git diff scope?▼

To run Semgrep static analysis on a git diff scope, load the changes from a pull request or feature branch. The skill applies Semgrep configuration specifically to the diff scope to identify security-relevant changes and prepare a surface-focused vulnerability assessment.

Does this security review skill work with pull requests and feature branches?▼

Yes, this security review skill works with pull requests, feature branches, and commits. It requires git diff inputs to analyze all changed files and produces a structured security review report suitable for PR gates or audit records.

What do I need to provide to generate a structured security review report?▼

To generate a structured security review report, you need to provide git diff inputs, a surfaces taxonomy, and Semgrep configuration. The skill uses these inputs to analyze changed files and produce a structured assessment suitable for audit records or PR gates.