Perform security-focused code reviews: analyze diffs for vulnerability introduction, trace git history for context, identify unsafe patterns in changed code, and verify security invariants hold.
When to use this skill
- Reviewing a security-sensitive PR
- Checking if a change introduces vulnerabilities
- Tracing the history of a security fix
Core concepts
This skill provides guidance on differential review best practices, patterns, and common pitfalls. It is designed to be loaded on demand when a relevant task is detected.
Installation
curl -LO https://opencode-skills.example/downloads/security/differential-review.zip
unzip differential-review.zip -d ~/.config/opencode/skills/Restart OpenCode — the skill loads automatically.
When it triggers
- reviewing a security-sensitive PR
- checking if a change introduces vulnerabilities
- tracing the history of a security fix