20 Differential Security Review alternatives
Differential Security Review: Trail of Bits' security review skill for PRs, commits, and diffs: risk-first analysis with git history, blast radius, and honest coverage limits. 20 agent skills do similar work, most sharing Security, Audit and Code Review, ranked by how much they have in common with Differential Security Review.
Back to Differential Security Review
-
by Trail of Bits
Finds secrets left in memory in C, C++ and Rust — including wipes the compiler deleted — and requires IR or assembly evidence before calling one optimized away.
-
by Trail of Bits
Audits npm, PyPI and Go dependencies for advisories, abandoned upstreams, publisher concentration and install-time scripts — measured by scripts, not estimated.
-
by Trail of Bits
Compiles cryptographic code and reads the emitted assembly for variable-time instructions, then triages which flagged operations actually touch secrets.
-
by OpenAI
OpenAI's skill for language- and framework-specific secure coding: detect the stack, load the matching reference guidance, then write secure-by-default code, flag critical issues passively, or produce a prioritised vulnerability report with fixes.
Also: AppSec, Code Review, Security
-
by OpenAI
OpenAI's skill for repository-grounded threat modelling: derive trust boundaries, assets and attacker capabilities from the actual code, rank abuse paths by likelihood and impact, and write a reviewable Markdown threat model.
Also: AppSec, Code Review, Security
-
by CodeRabbit
Pull unresolved CodeRabbit review threads from your PR and apply the fixes one at a time, treating every reviewer comment as untrusted input rather than an instruction.
Also: Code Review, Pull Request
-
by Alibaba Group
Alibaba's open-source AI code review CLI as an agent skill: line-level comments on diffs, branches and commits, with optional auto-fix.
Also: Code Review, Pull Request
-
by Pillar Security
Pillar Security's SAIL V2 framework as an agent skill: a 91-risk catalogue across seven lifecycle phases, for AI security gap assessments, roadmaps, and ISO 42001 / EU AI Act compliance checklists.
-
by Trail of Bits
Trail of Bits' CodeQL skill: build databases, run taint-tracking and data-flow queries across eight languages, and model project-specific sources and sinks.
-
by Trail of Bits
Trail of Bits' skill for writing production-quality Semgrep rules — pattern design, taint mode for data-flow bugs, and mandatory test-driven validation.
-
by Firebase
Firebase's official red-team skill for auditing Firestore and Cloud Storage security rules — hunting privilege escalation, create/update bypasses and resource-exhaustion holes.
-
by Sentry
Audit GitHub Actions workflows for the exploitation patterns that leak secrets or allow code execution from a fork.
-
by Sentry
Audit the changes on your current branch for bugs, security vulnerabilities, and quality problems before you push.
-
by Trail of Bits
CodeQL, Semgrep and SARIF static-analysis toolkit from Trail of Bits: taint tracking, fast pattern scans and merged, deduplicated security findings for coding agents.
Also: Code Review, Security
-
by OpenQodex
Open source pre-push AI code review for Claude Code and Codex: scanners plus a separate reviewer that verifies every finding.
Also: Code Review, Security
-
by Sentry
Review pull requests against a real engineering practice — security, performance, testing, and design, in that order.
Also: Code Review, Security
-
by Datadog
Official Datadog skill that triages a failing PR pipeline, attributing every CI failure as flaky, infra or genuine regression and proposing a targeted fix.
Also: Pull Request
-
by OpenAI
OpenAI's skill for debugging failing GitHub Actions checks on a pull request: pull the logs with the gh CLI, summarise the failure, plan the fix, implement only after approval.
Also: Pull Request
-
by Cloudflare
Audit Core Web Vitals with real measurements via Chrome DevTools — then fix what the numbers actually point to.
Also: Audit
-
by NVIDIA
Generates or refreshes an NVIDIA governance skill card for an existing agent skill — discovers assets, renders a deterministic markdown card, and blocks submission while human-review markers remain.
Also: Audit
