Skip to content
Security
Command

/diff-review

Performs security-focused differential review of code changes

BOOST
Guide
@trailofbitstrailofbits@trailofbits
From plugin
skills
7.9k8 skills30 agents8 commands1 MCP
> /plugin marketplace add trailofbits/skills

Command definition

diff-review.md
description: Performs security-focused differential review of code changes
argument-hint: "<pr-url|commit-sha|diff-path> [--baseline <ref>]"
allowed-tools: Read Write Grep Glob Bash

Differential Security Review

**Arguments:** $ARGUMENTS

Parse arguments: 1. **Target** (required): PR URL, commit SHA, or diff path 2. **Baseline** (optional): `--baseline <ref>` for comparison reference

Invoke the `differential-review` skill with these arguments for the full workflow.

Read it on GitHub ↗
Stats
PythonRustRubyC++GitGitHubGitHub ActionsMarkdownMermaidAnthropicMCPAndroid
8,180
Stars
700
Forks
Active
Maintenance
Python
Language
CC-BY-SA-4.0
License
Last commit
Created

Repo: trailofbits/skills

In this plugin
95 skills30 agents8 commands1 MCP
See everything inside
@trailofbits
Ships withskills

Trail of Bits skills and plugins for AI-assisted security analysis, testing, and development. Install this marketplace in Claude Code or Codex, or import it into your ChatGPT workspace marketplace.

7.9k95 skills30 agents1 MCP
Get the whole plugin

Stars on GitHub

Momentum

stars in total
7.9k
Star history of trailofbits/skills on GitHub, a chart by star-history.com
See what's trending this week

Other commands on skills.

git-cleanup

git-cleanup

Command

Safely analyzes and cleans up local git branches and worktrees, categorizing them as merged, squash-merged, superseded, or active…

skills
@trailofbits@trailofbitsInstall Command
audit

audit

Command

Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…

skills
@trailofbits@trailofbitsInstall Command
See all 8 commands in skills

More commands from other plugins.

deslop-reborn

deslop-reborn

Command

One iteration of the IronClaw Reborn de-slop loop — take ONE Reborn crate, fan out parallel review sub-agents (thermo-nuclear…

ironclaw2w13k
@nearai@nearaiInstall Command
arsenal

arsenal

Command

Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…

agentic-bug-hunter2w5.8k
@awarexone@awarexoneInstall Command
arsenal

arsenal

Command

Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…

agentic-bug-hunter2w5.8k
@shuvonsec@shuvonsecInstall Command