Differential Review

Plugin Active

Security-focused differential review of code changes with git history analysis and blast radius estimation

1 Skill 0 MCPs

Purpose

To provide in-depth, security-focused code change reviews that identify vulnerabilities, regressions, and potential impact.

Features

Security-focused differential code review
Git history analysis for regressions
Blast radius calculation for impact assessment
Test coverage gap identification
Adaptive analysis depth based on codebase size

Use Cases

Reviewing PRs for security vulnerabilities
Detecting security regressions in code
Analyzing the potential impact of code changes
Checking for untested code modifications

Non-Goals

General code linting or formatting
Analyzing greenfield code without a baseline
Providing only a verbal explanation of findings
Replacing standard developer code reviews for non-security issues

Trust

warning:Issues Attention13 issues opened and 4 closed in the last 90 days indicates a low closure rate, suggesting slow maintainer response.

Installation

First, add the marketplace

/plugin marketplace add trailofbits/skills

/plugin install differential-review@trailofbits

Contains 1 extensions

Skill (1)

Differential Review Skill

Performs security-focused differential review of code changes (PRs, commits, diffs). Adapts analysis depth to codebase size, uses git history for context, calculates blast radius, checks test coverage, and generates comprehensive markdown reports. Automatically detects and prevents security regressions.

Quality Score

78 /100

Analyzed about 20 hours ago

Trust Signals

Last commit3 days ago

GitHub owner trailofbits

Stars5.2k

LicenseCC-BY-SA-4.0

Status

View Source

Similar Extensions

Kaizen

Inspired by Japanese continuous improvement philosophy, Agile and Lean development practices. Introduces commands for analysis of root cause of issues and problems, including 5 Whys, Cause and Effect Analysis, and other techniques.

Plugin

NeoLabHQ

Skill Optimizer

Analyze and optimize your Agent Skills (SKILL.md) using session data and research-backed static checks. Works with Claude Code, Codex, and any Agent Skills-compatible agent.

Plugin

hqhq1025

Review Agent Governance

Require a human approval signal before an AI agent can post PR reviews, comments, merges, or writes to CI config. Cedar-gated, receipt-signed, designed for the Hermes-style failure mode where a review bot posts without oversight.

Plugin

wshobson

Performance Testing Review

Performance analysis, test coverage review, and AI-powered code quality assessment

Plugin

wshobson

Comprehensive Review

Multi-perspective code analysis covering architecture, security, and best practices

Plugin

wshobson

Skill Improver

Automatically reviews and fixes Claude Code skills through iterative refinement until they meet quality standards. Requires plugin-dev plugin.

Plugin

trailofbits