domains / families / security / differential-review

differential-review

authentic

Performs security-focused differential review of code changes. Adapts analysis depth to codebase size, uses git blame for context, calculates blast radius by counting callers, checks test coverage of modified code, and generates a markdown report. Use when reviewing a PR, commit, or diff for security vulnerabilities, checking whether a change re-introduces a previously fixed bug, asking what else a change could break, or finding which modified code has no test covering it.

When to use

• reviewing a PR, commit, or diff for security vulnerabilities
• checking whether a change re-introduces a previously fixed bug
• asking what else a change could break
• finding which modified code has no test covering it

When not to use

• **Greenfield code** (no baseline to compare)
• **Documentation-only changes** (no security impact)
• **Formatting/linting** (cosmetic changes)
• **User explicitly requests quick summary only** (they accept risk)

Skill page

Source