differential-review

Analyze git diffs for security vulnerabilities and regressions.

Updated Nov 23, 2025
One-click install
npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill differential-review-manuelbrandner85
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: differential-review
Source: https://github.com/manuelbrandner85/Weltenbibliothekapp/tree/main/.agents/skills/differential-review
Command: npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill differential-review-manuelbrandner85

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill addresses the risk of security regressions and vulnerabilities in code changes by providing a structured, evidence-based methodology for differential security reviews.

Core Features & Use Cases

  • Risk-First Analysis: Prioritizes code changes involving authentication, cryptography, and external calls to ensure critical paths are scrutinized.
  • Adversarial Modeling: Uses a dedicated agent to build concrete exploit scenarios for high-risk changes, moving beyond theoretical concerns.
  • Blast Radius Calculation: Quantitatively assesses the impact of changes by analyzing call graphs and dependency usage.
  • Use Case: Use this skill when reviewing a pull request that modifies an authentication module to ensure no security invariants are broken and that test coverage is sufficient.

Quick Start

Use the differential-review skill to analyze the security impact of the current git diff and generate a comprehensive markdown report.

Frequently Asked Questions about differential-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security-focused differential code review on a git diff?

Perform a security-focused differential code review by analyzing PRs, commits, and diffs to identify potential vulnerabilities and regressions, generating a structured markdown audit report.

What is blast radius calculation in security code reviews?

Blast radius calculation quantitatively assesses the security impact of code changes by analyzing call graphs and dependency usage to determine the extent of potential vulnerabilities.

How do I generate exploit scenarios for high-risk code changes?

Generate exploit scenarios for high-risk code changes through adversarial modeling, which builds concrete attack simulations prioritizing modifications to authentication, cryptography, and external calls.

Can I use this to review pull requests modifying authentication modules?

Yes, you can review pull requests modifying authentication modules to ensure no security invariants are broken, verify test coverage sufficiency, and validate rigorous security protocols.

What is the best way to prioritize code changes for security audits?

Prioritize code changes for security audits using a risk-first analysis methodology that targets modifications involving authentication, cryptography, and external calls to scrutinize critical paths.

Does the differential review process require git history integration for evidence-based findings?

Yes, differential security reviews require git history integration to satisfy requirements for evidence-based findings, ensuring vulnerabilities are tracked through commits and structured audit reports.