Skip to main content
affpapa.org
RU EN
skill Claude Code CX Codex Cursor GitHub Copilot

differential-review — Claude Code skill: what it does, install

Reviews code changes for security issues using Git history and test coverage. Use it for commits, diffs, and pull requests that need a written review report.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓ 
npx skills add trailofbits/skills --skill differential-review -a claude-code
Open on GitHub

What differential-review does

This skill examines changed files, assigns risk levels, and looks for security issues around authentication, cryptography, external calls, value transfer, and removed validation. It uses git blame to inspect deleted security-related code and estimates blast radius by counting callers of risky changes.

Its review depth changes with repository size: smaller codebases receive deeper dependency reading, while larger ones focus on critical paths. The skill checks whether modified code has test coverage and writes a Markdown report that ties findings to lines, commits, and attack scenarios.

For high-risk changes, it can delegate attacker modelling to differential-review:adversarial-modeler. Greenfield code lacks a baseline for comparison, so this skill is not the right review path there.

What it helps with

  • review a code change for security issues
  • detect a reintroduced fixed bug
  • measure the blast radius of a change
  • find modified code without test coverage
  • produce a Markdown security review report

Example prompts for the agent

  • Review this `PR` for security issues and write a report.
  • Analyze this commit for a regression of a previously fixed bug.
  • Calculate the blast radius of this diff and identify changed code without tests.

How to install differential-review

1Skills CLI (Vercel)

npx skills add trailofbits/skills --skill differential-review -a claude-code

2Manually: put the files in place

~/.claude/skills/differential-review/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/differential-review/

From the same set35

The whole set →
semgrep trailofbits Runs a Semgrep static security audit on your codebase. It presents a plan for user confirmation and merges all findings into SARIF. Claude Code CX Codex Cursor +1 9,500installs modern-python trailofbits Configures Python projects with a modern tooling stack: uv for dependency management, ruff for linting and formatting, ty for type checking. Use when starting new projects, writing scripts, or migrating from legacy tools. Claude Code CX Codex Cursor +1 8,700installs secure-workflow-guide trailofbits Guides smart contracts through Trail of Bits' 5-step security audit on check-in or before deployment. It runs static analysis, generates visual charts, and prepares fuzzing tests. Claude Code CX Codex Cursor +1 7,400installs sharp-edges trailofbits Audits API designs and configuration schemas for developer footguns. Flags dangerous defaults and fragile interfaces where the easiest path causes security vulnerabilities. Claude Code CX Codex Cursor +1 6,900installs agentic-actions-auditor trailofbits Inspects GitHub Actions workflows for prompt injection risks and insecure AI agent setups. Catches attacker inputs leaking into prompts via event contexts or environment variables. Claude Code CX Codex Cursor +1 6,700installs gh-cli trailofbits A skill that redirects GitHub requests from curl and fetch to authenticated gh CLI for repositories, pull requests, and issues. Use it for private repos and higher API limits. Claude Code CX Codex Cursor +1 6,600installs variant-analysis trailofbits Finds related occurrences of an already identified defect across a repository. Use it after a vulnerability or logic issue turns up and similar code needs checking. Claude Code CX Codex Cursor +1 6,400installs sarif-parsing trailofbits Processes existing SARIF reports from CodeQL, Semgrep, and other scanners. Use it to filter findings, remove duplicates, or prepare results for CI/CD. Claude Code CX Codex Cursor +1 5,900installs

Similar

ctf-ai-ml ljagiello Provides AI and machine learning attack techniques for CTF competitions, from adversarial examples to LoRA weight inspection and prompt injection. Claude Code CX Codex Cursor +1 7,700installs nestjs-expert https://github.com/Jeffallan A skill for designing and building NestJS backends in TypeScript: modules, services, controllers, validation, authentication and testing. Use it when building REST APIs or GraphQL services with enterprise patterns. Claude Code CX Codex Cursor +1 5,900installs cli-keys cheaper-inference Manages OmniRoute API keys and provider OAuth flows from your terminal. Handy when configuring model access and usage policies. Claude Code CX Codex Cursor +1 1,000installs kr-whois-lookup NomaDamas Queries public registration data for .kr domains, IP addresses, and AS numbers via k-skill-proxy. Read-only tool for coding agents. Claude Code CX Codex Cursor +1 4,200installs fullstack-guardian https://github.com/Jeffallan Builds security-focused full-stack web features across frontend and backend layers. Useful for shipping authenticated APIs, CRUD forms, and database flows. Claude Code CX Codex Cursor +1 5,600installs careful garrytan Intercepts Bash and PowerShell commands before execution to catch destructive actions like forced git pushes or database drops. Useful when giving agents terminal access. Claude Code CX Codex Cursor +1 375installs git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. Claude Code 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. Claude Code CX Codex Cursor +1 56,300installs

Questions about differential-review

How do I install differential-review in Claude Code?

Run npx skills add trailofbits/skills --skill differential-review -a claude-code, then run npx skills add trailofbits/skills --skill differential-review -a claude-code again. The skill file is placed at ~/.claude/skills/differential-review/SKILL.md.

What does differential-review do?

It performs a security-focused review of code changes. The skill uses Git history, evaluates callers for blast radius, checks test coverage, and creates a report.

When does differential-review use its subagent?

It can delegate attacker modelling for high-risk changes to differential-review:adversarial-modeler. Use the full namespaced subagent name, because the bare name fails to dispatch.

See also

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor