skills.rest
iani-kuli
iani-kuliCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

find-bugs

Analyze git branch diffs for security vulnerabilities and code quality defects.

Updated May 5, 2026
Search Tags:#git#static analysis#code review#debugging#security audit#vulnerability scanning
One-click install
npx skills add https://github.com/iani-kuli/harness_bro --skill find-bugs-iani-kuli
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: find-bugs
Source: https://github.com/iani-kuli/harness_bro/tree/main/.claude/skills/ported/find-bugs
Command: npx skills add https://github.com/iani-kuli/harness_bro --skill find-bugs-iani-kuli

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the challenge of identifying security vulnerabilities and code quality issues during manual code reviews, ensuring a systematic and comprehensive audit of branch changes.

Core Features & Use Cases

  • Automated Diff Analysis: Automatically pulls and reviews the full diff between the current branch and the default branch.
  • Security Checklist: Enforces a rigorous multi-phase security audit covering injection, XSS, authentication, and authorization.
  • Use Case: Use this during a pull request review to ensure that all user inputs, database queries, and authentication checks in the new code meet security standards before merging.

Quick Start

Use the find-bugs skill to perform a comprehensive security audit on the changes in the current branch.

Frequently Asked Questions about find-bugs

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security auditing on git branch changes before a pull request?▼

Static code analysis automatically fetches the full diff between your current branch and the default branch. It evaluates code changes against a security checklist to identify vulnerabilities and quality defects before merging.

What does static code analysis check for during a security audit?▼

Static code analysis performs a multi-phase security audit covering injection risks, XSS, authentication, and authorization. It rigorously evaluates code diffs to identify vulnerabilities and quality defects.

Do I need git and GitHub CLI integration to perform automated code reviews?▼

Yes, performing automated code reviews requires git and GitHub CLI integration. These dependencies are required to fetch and evaluate the code diffs against your repository's default branch.

Can I use automated vulnerability scanning for security compliance in software development workflows?▼

Yes, automated vulnerability scanning supports security compliance in software development workflows. It rigorously audits branch changes to ensure user inputs and database queries meet security standards.

What is the best way to detect code quality defects in a new feature branch?▼

The best way to detect code quality defects is automated diff analysis on your feature branch. It evaluates changes against the default branch to systematically identify vulnerabilities and quality issues.

Related Skills

Explore More Software Engineering Skills→
ArtmannArtmann
1

review-changes

Analyze feature branch changes against the default branch and report issues by severity.

Community
Intermediate
SensLiaoSensLiao

qa-static-baseline

Automate static code analysis and security scanning on pull requests or CI pipelines.

Community
Intermediate
jmylchreestjmylchreest
15

review

Automate code reviews and security audits on pull requests and diffs.

Community
Advanced
endorlabsendorlabs
2

endor-review

Automate pre-PR security reviews by scanning changed files for vulnerabilities, secrets, licenses, and compliance issues.

Official
Advanced