differential-review

Analyze code diffs for security regressions and vulnerabilities.

47|5|Updated Apr 25, 2026
One-click install
npx skills add https://github.com/RedHatProductSecurity/prodsec-skills --skill differential-review-redhatproductsecurity
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: differential-review
Source: https://github.com/RedHatProductSecurity/prodsec-skills/tree/main/module/skills/differential-review
Command: npx skills add https://github.com/RedHatProductSecurity/prodsec-skills --skill differential-review-redhatproductsecurity

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

It streamlines the process of conducting security-focused differential reviews, helping teams identify regressions, vulnerabilities, and structural issues across code changes efficiently.

Core Features & Use Cases

  • Risk-based Analysis: Evaluates code changes based on risk level, blast radius, and historical context.
  • Automated Breakdown: Performs deep, focused, or surgical analysis tailored to the size and severity of changes.
  • Use Case: During a large codebase update, use this Skill to prioritize security review efforts on high-risk modules by analyzing git history, testing coverage, and call graphs, enabling faster decision-making.

Quick Start

Use the differential review skill to analyze the latest pull request involving multiple files and generate a detailed security report.

Frequently Asked Questions about differential-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security code reviews for pull requests?

Automated security code reviews for pull requests identify potential vulnerabilities and regressions by evaluating code diffs, testing gaps, and blast radius. This risk assessment prioritizes high-risk modules, enabling faster manual reviews and continuous integration security checks.

What is risk-based diff analysis in git workflows?

Risk-based diff analysis in git workflows evaluates code changes by calculating their blast radius and historical context. It performs deep, focused, or surgical analysis tailored to the severity of modifications, detecting security regressions and structural issues efficiently.

Can I use automated diff analysis for continuous integration security checks?

Yes, automated diff analysis is suitable for continuous integration workflows and manual reviews. It detects code modifications and testing gaps to identify potential security vulnerabilities, ensuring that risk assessment and blast radius calculations run seamlessly across integrated codebases.

How do I identify security regressions in code changes?

To identify security regressions in code changes, perform risk assessment and analyze code diffs alongside historical context. This process detects modifications, testing gaps, and calculates blast radius to pinpoint structural issues and vulnerabilities across updated modules.

What is the best way to prioritize security review efforts for large codebase updates?

The best way to prioritize security review efforts for large codebase updates is analyzing git history, testing coverage, and call graphs. This automated risk-based analysis evaluates blast radius to focus on high-risk modules, enabling faster decision-making.

Does automated security review work with manual code analysis?

Automated security review works with manual code analysis by providing detailed security reports from code diff evaluations. It streamlines the manual process by highlighting regressions, vulnerabilities, and testing gaps, allowing reviewers to focus on complex structural issues.