Differential Security Review

Security-focused code review for PRs, commits, and diffs.

When to Use

• You need a security-focused review of a PR, commit range, or diff rather than a general code review.
• The changes touch auth, crypto, external calls, value transfer, permissions, or other high-risk logic.
• You need findings backed by code evidence, attack scenarios, and an explicit report artifact.

Core Principles

1. Risk-First: Focus on auth, crypto, value transfer, external calls
2. Evidence-Based: Every finding backed by git history, line numbers, attack scenarios
3. Adaptive: Scale to codebase size (SMALL/MEDIUM/LARGE)
4. Honest: Explicitly state coverage limits and confidence level
5. Output-Driven: Always generate comprehensive markdown report file