differential-review

Name: differential-review
Availability: InStock
Author: Superlend

Analyze code diffs for security risks and generate markdown audit reports.

Updated Jul 10, 2025

Search Tags:#security #code-review #git-history #test-coverage #blast-radius #markdown-report #differential-review

Ready to run

npx skills add https://github.com/Superlend/superloop-core-contracts --skill differential-review-superlend

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: differential-review
Source: https://github.com/Superlend/superloop-core-contracts/tree/main/.cursor/skills/differential-review/skills/differential-review
Command: npx skills add https://github.com/Superlend/superloop-core-contracts --skill differential-review-superlend

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security-focused differential reviews are essential to detect regressions in PRs, commits, and diffs but can be slow and error-prone. This Skill automates depth-adjusted analysis, integrates git history for context, computes blast radius, and ensures test coverage is considered, delivering a comprehensive markdown report.

Core Features & Use Cases

Adaptive analysis depth based on codebase size (SMALL/MEDIUM/LARGE)
Blast-radius calculation and risk-based triage to prioritize reviews
Test coverage checks and evidence-backed findings
Phase-based workflow from triage to final reporting
Auto-generated markdown audit reports with line references and commit references
Use cases: security reviews for PRs, audits of commits during patches, and differential analysis during migrations

Quick Start

Provide a diff or PR reference and a baseline to compare against
Run differential-review in your CI or local environment
The tool outputs a Markdown audit report suitable for stakeholder review

Frequently Asked Questions about differential-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

What is a security-focused differential code review and when do I need it?▼

A security-focused differential code review analyzes changes in PRs, commits, and diffs to detect regressions. You need it during patches, migrations, or pull requests to calculate blast radius, check test coverage, and prevent security vulnerabilities using git history context.

How do I perform a differential review on a pull request?▼

To perform a differential review, provide a diff or PR reference alongside a baseline comparison branch. The tool runs a phase-based workflow from triage to reporting, adapting analysis depth to codebase size and generating a markdown audit report with line references and risk levels.

Can I use adaptive code analysis for large codebases?▼

Yes, adaptive code analysis scales for large codebases by automatically adjusting the analysis depth based on repository size classified as SMALL, MEDIUM, or LARGE. This ensures efficient security reviews and blast-radius calculations without overwhelming your environment or sacrificing audit-ready output.

What's the best way to generate an audit-ready report for commit history?▼

The best way to generate an audit-ready report is running a differential review that integrates git history for context and computes blast radius. It outputs a comprehensive markdown report documenting findings with precise line references, commit references, and risk levels for stakeholder remediation.

Does differential analysis consider test coverage when checking for security regressions?▼

Yes, differential analysis explicitly checks test coverage as part of its security regression workflow. It combines coverage data with evidence-backed findings and blast-radius calculations to triage risks, ensuring changes are validated before generating the final markdown audit report.

Why use blast radius calculation in code reviews instead of standard static analysis?▼

Blast radius calculation identifies the potential impact scope of code changes, enabling risk-based triage to prioritize remediation. Unlike standard static analysis, it uses git history context and adaptive depth to focus specifically on differential changes and prevent regressions in modified commits and diffs.