What problem does it solve?
This Skill provides a structured audit process to find bugs, security vulnerabilities, and code-quality regressions introduced on a Git branch by examining diffs, mapping attack surface, and verifying protections and tests.
Core Features & Use Cases
- Diff-driven review: Obtain the full branch diff and inspect each changed file and changed line for issues.
- Attack surface mapping: Identify user inputs, DB queries, auth checks, session/state operations, external calls, and cryptographic operations per file.
- Security checklist and verification: Apply a per-file checklist (injection, XSS, CSRF, auth/authorization, race conditions, cryptography, DoS, information disclosure, business logic) and verify whether protections exist and tests cover scenarios.
- Use Case: Run prior to merging a pull request or during a security audit to produce a prioritized, evidence-backed remediation plan.
Quick Start
Run the find-bugs skill to analyze the current branch diff and produce a prioritized security and bug report.