Differential Security Review

Review code changes as security regressions relative to a baseline. Focus on changed behavior, removed invariants, reachable attack paths, and test coverage.

Routing

• Use code-reviewer for ordinary bug-focused or quick code review.
• Use this skill when the user asks for security, audit, regression, blast radius, adversarial review, or when the diff touches auth, authorization, crypto, validation, secrets, external calls, data exposure, or value transfer.
• If the user explicitly asks for a quick summary, scale the report down and state coverage limits instead of forcing a full audit artifact.

Retrieval Rules

Read the narrowest reference needed: