skills.rest
somachak
somachakCOMMUNITY
Explore all skills by this author →
GitHub

differential-review

Detect security regressions in code changes and generate Markdown audit reports.

Updated Apr 14, 2026
Search Tags:#security#auditing#code-review#git-history#blast-radius#pr-review#differential
One-click install
npx skills add https://github.com/somachak/claude-code-skills-db --skill differential-review-somachak
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: differential-review
Source: https://github.com/somachak/claude-code-skills-db/tree/main/skills/security-reliability/differential-review
Command: npx skills add https://github.com/somachak/claude-code-skills-db --skill differential-review-somachak

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides automated, risk-focused analysis of code changes (PRs, commits, diffs) to identify security regressions and context-rich findings, reducing blind spots in code reviews.

Core Features & Use Cases

  • Adaptive analysis depth based on codebase size (SMALL/MEDIUM/LARGE) to balance thoroughness and speed.
  • Blast radius calculation with git-history-backed evidence to measure impact.
  • Comprehensive, Markdown-formatted audit reports suitable for security reviews and compliance.
  • Automatic detection of security regressions across authentication, cryptography, external calls, and data flows.
  • Works across PR workflows, commits, and diffs to support CI/CD review processes.

Quick Start

Run a differential-review on the latest PR to generate a comprehensive security audit report.

Frequently Asked Questions about differential-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security review for pull requests and commits?▼

Automate code review by analyzing diffs and git history to detect security regressions. The process calculates blast radius and generates a Markdown audit report highlighting risks in authentication, cryptography, and data flows.

What is blast radius calculation in the context of secure code review?▼

Blast radius calculation measures the potential impact of code changes using git-history-backed evidence. It identifies coverage gaps and contextualizes the severity of security regressions found in the diff.

Does differential security analysis adapt to large codebases?▼

Yes, differential security analysis adapts to large codebases by adjusting analysis depth based on size (SMALL/MEDIUM/LARGE). This balances thoroughness and speed while scanning for security regressions across your commits.

Can I integrate automated PR review into CI/CD workflows?▼

Yes, you can integrate automated PR review into CI/CD workflows. The analysis works across PR workflows, commits, and diffs to support CI/CD review processes by outputting a comprehensive Markdown audit report.

What security regressions are detected during a diff review?▼

A diff review automatically detects security regressions across authentication, cryptography, external calls, and data flows. It exposes these risks early to reduce blind spots in your code reviews.

What is the output format for automated security auditing?▼

The output format for automated security auditing is a comprehensive Markdown report. This audit report details identified security regressions, blast radius calculations, and coverage gaps suitable for compliance.

Related Skills

Explore More Software Engineering Skills→
jovermierjovermier
1

git-history-analyzer

Analyze repository commit history to trace code evolution and ownership.

Community
Basic
trailofbitstrailofbits
6.5k

differential-review

Analyze security-focused git diffs and generate markdown audit reports.

Official
Advanced
guideopsguideops

gitnexus-pr-review

Analyzes pull requests for impact, risk, and test coverage.

Community
Advanced
DanielPodolskyDanielPodolsky
274

security-gate

Review code changes for security vulnerabilities before merge or deployment.

Community
Basic