Differential Review: Trail of Bits formalizes PR security differential review into an executable workflow

Differential-review is an Agent Skill released by Trail of Bits, which conducts security-focused reviews on PRs, commits and diffs: it classifies tasks by risk rather than line count, uses git history to detect regressions, quantitatively calculates the blast radius, treats missing tests as a higher risk factor, and enforces the output of a Markdown report with line numbers and attack scenarios. This article checks the official SKILL.md, plugin README and documentation website, explaining what problems it solves, how to install it in Claude Code / Codex / the general Skill catalog, as well as three official usage scenarios and inapplicable scenarios.