SubmitLog in
c/security › command
0votes

Security diff review (Trail of Bits)

Skill
submitted by u/client to c/security · 0 uses

Security-focused review of a PR or diff, with blast radius, history and test coverage checks.

When reviewing a PR, commit or diff, Claude checks the changes for security problems with an attacker's mindset. It uses git blame to see why code changed, counts callers to estimate blast radius, checks for re-introduced past bugs and finds changed code with no test coverage, then writes a markdown report. Depth adapts to the size of the codebase. Includes methodology, pattern and reporting guides.

Try asking:

  • "Do a security review of PR #482"
  • "Could this diff reintroduce the auth bypass we fixed last year?"
  • "What else could this change break?"

Source: trailofbits/skills · CC-BY-SA-4.0 · by Trail of Bits

0 commentsreport

Install this skill

Skills are folders with a SKILL.md file. Claude loads one on its own when a task matches its description. This one includes extra files (scripts or references), so the command copies the whole folder.

Claude Code plugin (easiest, stays up to date)
/plugin marketplace add trailofbits/skills
/plugin install differential-review@trailofbits
Claude Code: for every project
npx degit trailofbits/skills/plugins/differential-review/skills/differential-review ~/.claude/skills/differential-review
Claude Code: this project only (commit it to share with your team)
npx degit trailofbits/skills/plugins/differential-review/skills/differential-review .claude/skills/differential-review
View SKILL.mdSource

Made by Trail of Bits, CC-BY-SA-4.0 license. Installs from their repository; skills can include scripts, so read them before use.

In the Claude apps, zip the folder and upload it under Settings → Capabilities → Skills.

More from c/security

See all of c/security →
0 comments

Log in to join the discussion.