patch-diff-analyzer

Analyze Java JAR and .NET DLL binary differences to locate security fixes.

5|3|Updated Apr 10, 2026
One-click install
npx skills add https://github.com/zebbern/termstack --skill patch-diff-analyzer-zebbern
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: patch-diff-analyzer
Source: https://github.com/zebbern/termstack/tree/main/.github/skills/patch-diff-analyzer
Command: npx skills add https://github.com/zebbern/termstack --skill patch-diff-analyzer-zebbern

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires git, jadx, jd-cli, cfr, ilspycmd, dotnet, monodis, java, and includes scripts (resource) components.

What problem does it solve?

Patch diff analysis helps security engineers quickly identify exactly what changes were introduced between two binary releases, focusing on security-relevant modifications rather than boilerplate edits.

Core Features & Use Cases

  • Decompiles and inventories changes between unpatched (baseline) and patched (target) binaries (Java JARs and .NET DLLs).
  • Generates a structured diff (patch-analysis.diff) and a changed-files list to guide security reviews.
  • Provides a guided workflow to isolate and reason about security fixes, including identifying a patch's impact on file access, validation, and logic.

Quick Start

Set up a dedicated workspace, decompile both the unpatched and patched binaries, tag them as unpatched and patched, and run the diff analysis to generate patch-analysis.diff and changed-files.txt.

Frequently Asked Questions about patch-diff-analyzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I analyze binary patches to locate security fixes in Java JARs?

To analyze binary patches in Java JARs, the Skill decompiles unpatched and patched binaries using jadx, generates a structured git diff, and isolates security-relevant modifications. It tags versions in a dedicated workspace to produce patch-analysis.diff and changed-files.txt.

Can I diff .NET DLLs to identify security-relevant changes between releases?

Yes, you can diff .NET DLLs to identify security fixes. The Skill decompiles both unpatched and patched .NET binaries using ilspycmd, generates a git diff, and inventories changed files to guide focused security reviews of validation and logic modifications.

What's the best way to find what changed between two binary release versions?

The best way to find changes between binary release versions is decompiling both versions, tagging them as unpatched and patched, and running a diff analysis. This generates patch-analysis.diff and changed-files.txt to highlight security-relevant modifications.

Do I need git and specific decompilers to perform binary patch diff analysis?

Yes, you need git to generate diffs and specific decompilers depending on the binary format. Java JARs require jadx, while .NET DLLs require ilspycmd, jd-cli, cfr, or monodis to decompile binaries for patch analysis.

What does a binary patch diff analysis output for security reviews?

A binary patch diff analysis outputs patch-analysis.diff and changed-files.txt. These files inventory modifications between unpatched and patched binaries, guiding security engineers to isolate changes impacting file access, validation, and logic.

Why use decompilation for binary patch analysis instead of standard source code diffing?

Decompilation is necessary for binary patch analysis because the source code is unavailable for compiled releases. By decompiling JARs and DLLs into readable code, the Skill can generate a structured git diff to locate security fixes.