# find-bugs

Walks the diff on your current branch and reports bugs, security holes and code quality problems. Handy before a merge or a push.

- skill · `type=skill` · Claude Code · 944 installs
- Author: davila7
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/davila7/claude-code-templates/tree/HEAD/cli-tool/components/skills/sentry/find-bugs
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/skills/find-bugs

## What it does

The skill runs a five-phase review. It starts with the full `git diff master...HEAD`, and if that output gets truncated it reads every changed file one by one until all changed lines are covered. Then it maps the attack surface per file: user input, database queries, auth checks, session and state operations, external calls, crypto.

Next comes a checklist applied to every file — injection, XSS, authentication, IDOR, CSRF, race conditions, secrets leaking into logs or error messages, missing rate limits. Each candidate issue gets verified: is it already handled elsewhere, is there a test covering it. Before writing conclusions the skill has to list the files it read and go through every checklist item.

Findings are ordered by weight: security first, then bugs, then quality. Styling and formatting are skipped. Every entry carries file and line, severity, evidence and a concrete fix. The skill reports only — it never edits your code. One thing to know: the diff is taken against `master`, so on a repo whose main branch is named differently you will have to adjust the command yourself.

## Requirements
- Works with: Sentry

## Install

### Claude Code (native platform)

1. **claude-code-templates**
```bash
npx claude-code-templates@latest --skill sentry/find-bugs
```

2. **Skills CLI (Vercel)**
```bash
npx skills add davila7/claude-code-templates --skill find-bugs -a claude-code
```

3. **Manually: put the files in place**
- File: `~/.claude/skills/find-bugs/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/find-bugs/

### Codex

**Manually: put the files in place**
- File: `.agents/skills/find-bugs/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

**Manually: put the files in place**
- File: `.cursor/skills/find-bugs/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install davila7/claude-code-templates find-bugs
```

2. **Manually: put the files in place**
- File: `.github/skills/find-bugs/SKILL.md`

### Gemini CLI

**Platform CLI**
```bash
gemini skills install https://github.com/davila7/claude-code-templates --path cli-tool/components/skills/sentry/find-bugs
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/find-bugs/SKILL.md` — The legacy .windsurf/skills/ path still works

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/davila7/claude-code-templates/tree/HEAD/cli-tool/components/skills/sentry/find-bugs

## When to use it
- review a branch diff before merging
- catch SQL injection and XSS in new lines
- confirm protected operations actually check access
- spot race conditions in read-then-write paths
- get findings ranked by severity with a suggested fix

## Example prompts
- review the changes on this branch for bugs and security issues
- run a security review on the diff before I merge
- audit the code on the current branch

## Similar
- [code-review](https://affpapa.org/en/nevibecode/skills/getsentry-code-review.md) — skill · 5500 installs
- [trailmark-review-gate](https://affpapa.org/en/nevibecode/skills/trailmark-review-gate.md) — skill · 1300 installs
- [sentry-setup-releases](https://affpapa.org/en/nevibecode/skills/sentry-setup-releases.md) — skill · 1500 installs
- [security-guidance](https://affpapa.org/en/nevibecode/plugins/security-guidance.md) — plugin · ★ 44635
- [audit-prep-assistant](https://affpapa.org/en/nevibecode/skills/audit-prep-assistant.md) — skill · 5700 installs
- [code-reviewer](https://affpapa.org/en/nevibecode/agents/voltagent-community-code-reviewer.md) — subagent · 31050 installs

From the same set: [davila7/claude-code-templates](https://affpapa.org/en/nevibecode/by/davila7/claude-code-templates.md) — 224 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md