differential-review

Review code changes for security regressions and generate markdown reports.

Updated Jan 19, 2026
One-click install
npx skills add https://github.com/rauly-1408/order-saas --skill differential-review-rauly-1408
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: differential-review
Source: https://github.com/rauly-1408/order-saas/tree/main/.claude/skills/differential-review
Command: npx skills add https://github.com/rauly-1408/order-saas --skill differential-review-rauly-1408

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security reviewers identify hidden risks in code changes by providing a structured differential review process that catches regressions, missing tests, and unsafe modifications.

Core Features & Use Cases

  • Security-Focused Diff Analysis: Reviews PRs, commits, and code changes with emphasis on authentication, cryptography, external calls, and value-transfer risks.
  • Risk and Impact Assessment: Uses git history, blast radius calculations, test coverage analysis, and adversarial thinking to evaluate change safety.
  • Report Generation: Produces evidence-backed markdown security review reports with findings, attack scenarios, and confidence limits for engineering teams.

Quick Start

Use the differential-review skill to analyze the latest code changes in this repository and generate a security review report.

Frequently Asked Questions about differential-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect security vulnerabilities in a pull request?

You can detect security vulnerabilities in a pull request by running a differential review that analyzes the git diff, evaluates blast radius, and generates an evidence-backed markdown report. This structured process identifies regressions and unsafe modifications in software updates.

What is blast radius evaluation in security code analysis?

Blast radius evaluation in security code analysis measures the potential impact of code changes by applying adversarial thinking and analyzing git history. It helps reviewers assess the risk and safety of modifications to authentication, cryptography, and external calls.

Can I use differential review for commits and diffs without a full pull request?

Yes, you can use differential review for commits and diffs without a full pull request. The security-focused diff analysis applies to various code changes, evaluating test coverage and identifying security regressions in software modifications.

What's the best way to generate a security review report for code changes?

The best way to generate a security review report for code changes is to perform a structured differential review that produces evidence-backed markdown reports. These reports include findings, attack scenarios, and confidence limits for engineering teams.

Does differential review assess test coverage for security-sensitive modifications?

Yes, differential review assesses test coverage for security-sensitive modifications. It evaluates test coverage alongside git history and blast radius calculations to ensure the safety of changes to authentication and cryptography.