git-forensics-scanner
Git diff forensics for surfacing and classifying code changes for trojan detection
npx skills add a5c-ai/babysitter --skill git-forensics-scanner --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Git Forensics Scanner Surfaces and classifies all code changes in a repository using git diff analysis, providing structured change sets for downstream semantic analysis. ## Purpose The first phase of nation-state trojan detection: identify exactly what changed, how much changed, and classify each change by risk level. Small diffs in critical code paths are flagged as highest-risk since business-logic trojans typically modify 1-5 lines. ## Capabilities ### Change Set Extraction - Unstaged changes (`git diff`) - Staged changes (`git diff --cached`) - Commit range diffs (`git diff <base>..<head>`) - Branch diffs (`git diff <base>...<head>`) - Per-file patch extraction with full hunk context ### Change Classification - **code** — Logic, algorithms, formulas, control flow - **config** — Constants, parameters, thresholds, defaults - **data-model** — Schemas, types, model properties, ORM mappings - **cosmetic** — Formatting, comments, whitespace, rounding wrappers ### Risk Triage - Files with 1-5 line changes in prediction/financial/auth code → HIGH RISK - Single-character operator changes → CRITICAL RISK - Comment-only changes accompanying code changes → CAMOUFLAGE RISK ## Input Schem
- Purpose
- Capabilities
- Change Set Extraction
- Change Classification
- Risk Triage
- Input Schema
- Output Schema
- Usage Example
- Process Files
What does the git-forensics-scanner skill do?
Git diff forensics for surfacing and classifying code changes for trojan detection
How do I install it?
Run `npx skills add a5c-ai/babysitter --skill git-forensics-scanner --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From a5c-ai/babysitter, a repository with 1,642 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.