differential-review
Security-focused code review for PRs, commits, and diffs.
Profile →npx skills add sickn33/agentic-awesome-skills --skill differential-review --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Differential Security Review Security-focused code review for PRs, commits, and diffs. ## When to Use - You need a security-focused review of a PR, commit range, or diff rather than a general code review. - The changes touch auth, crypto, external calls, value transfer, permissions, or other high-risk logic. - You need findings backed by code evidence, attack scenarios, and an explicit report artifact. ## Core Principles 1. **Risk-First**: Focus on auth, crypto, value transfer, external calls 2. **Evidence-Based**: Every finding backed by git history, line numbers, attack scenarios 3. **Adaptive**: Scale to codebase size (SMALL/MEDIUM/LARGE) 4. **Honest**: Explicitly state coverage limits and confidence level 5. **Output-Driven**: Always generate comprehensive markdown report file --- ## Rationalizations (Do Not Skip) | Rationalization | Why It's Wrong | Required Action | |-----------------|----------------|-----------------| | "Small PR, quick review" | Heartbleed was 2 lines | Classify by RISK, not size | | "I know this codebase" | Familiarity breeds blind spots | Build explicit baseline context | | "Git history takes too long" | History reveals regressions | Never skip Phase 1
- When to Use
- Core Principles
- Rationalizations (Do Not Skip)
- Quick Reference
- Codebase Size Strategy
- Risk Level Triggers
- Workflow Overview
- Decision Tree
- Quality Checklist
- Integration
- Example Usage
- Quick Triage (Small PR)
- Standard Review (Medium Codebase)
- Deep Audit (Large, Critical Change)
What does the differential-review skill do?
Security-focused code review for PRs, commits, and diffs.
How do I install it?
Run `npx skills add sickn33/agentic-awesome-skills --skill differential-review --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From sickn33/agentic-awesome-skills, a repository with 44,414 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.