Skip to content
Back to skills

Diff

ASecurity

Explain or review a GitHub pull request with captured evidence and an offline HTML review with grouped code. Use only when explicitly invoked.

  • 8 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added August 30, 2026
ai-agentsshellnodegitsecurity

Works with

  • claude code
  • cli

Security analysis

A100/100

Pro scans all 20 files and shows the line behind each finding

Scanned September 30, 2026

npx -y skills add dkstm95/hope --skill diff --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Diff?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Diff
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/dkstm95-diff/badge)](https://www.skillsdirectory.com/skills/dkstm95-diff)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: diff
description: Explain or review a GitHub pull request with captured evidence and an offline HTML review with grouped code. Use only when explicitly invoked.
disable-model-invocation: true
---

# Hope Diff

Use only when the person invokes `$hope:diff`, `/hope:diff`, or the
host's equivalent skill command or picker. Continue follow-ups within that
invoked task without requiring another invocation. Ordinary requests and calls
from another skill do not activate this skill; continue authorized work through
the ordinary workflow. Reading a shared reference does not invoke its skill.

Resolve one exact GitHub pull request, analyze its captured evidence, and
report one artifact with the overall explanation and the complete diff organized
into meaningful change groups. This reader is always part of a generated review;
do not offer a separate skill, mode, or opt-in. Diff covers the captured PR snapshot; local staged,
unstaged, and untracked changes are outside its scope.

## Resolve the request

Answer a narrow question directly without starting the artifact workflow.

An explicit explanation or review request authorizes the run. Honor existing
authorization and display choices without asking again. A bare target without
a clear task needs clarification, not an automatic full review.

Use `resolve-target [GitHub PR URL or PR number]` to resolve the target before
asking any needed question. Name the repository and PR number. If resolution
fails, ask for a URL or number. Once selected, pass that exact target; do not
fall back to automatic discovery.

Run adapter commands with `node "<skill-dir>/scripts/cli.mjs"`, replacing
`<skill-dir>` with the absolute directory containing this file. In Claude Code
it is `${CLAUDE_PLUGIN_ROOT}/skills/diff`. Pass arguments separately; never
construct shell commands from PR content.

## Analyze the captured evidence

For artifact generation, read `references/workflow.md`, `references/analysis.md`, and
`../write/references/writing-standard.md`. Follow the run from `prepare` through
`finish` or `cancel`, grounding conclusions in the captured evidence.

Use an independent worker when its perspective is worth the time or the person
requests one. Give it a fresh context with the exact request, target, choices,
constraints, and Skill path, separate from earlier conclusions. Disclose any
limit on requested independence. The same evidence and runtime rules apply
whether analysis stays in this conversation or is delegated.

Review generation uses the active host under its data policy; do not claim
private PR content stays on the local machine.

## Return the artifact

Report the PR, exact head, result scope, absolute HTML path, and any failure or
cleanup limit. The artifact completes Diff. The surrounding task handles any
publishing, merging, commenting, or code changes under the person's existing
authorization.

Maintainers changing the runtime read `references/runtime.md` for its
deterministic security and publication contract.

Files in this skill

  • SKILL.md3 KB
  • agents/openai.yaml303 B
  • assets/hope-protected-light.png96.6 KB
  • references/analysis.md7.8 KB
  • references/runtime.md2.6 KB
  • references/teaching-aids.md1.5 KB
  • references/workflow.md5.2 KB
  • scripts/analysis-v3.schema.json19.4 KB
  • scripts/artifact.mjs5.4 KB
  • scripts/checkpoint-window-v2.schema.json3 KB
  • scripts/checkpoint.mjs27.2 KB
  • scripts/cli.mjs8.2 KB
  • scripts/code-evidence.mjs2.7 KB
  • scripts/command-options.mjs1.1 KB
  • scripts/constants.mjs2 KB
  • scripts/context.mjs6.6 KB
  • scripts/derive.mjs942 B
  • scripts/design/tokens.mjs2.7 KB
  • scripts/evidence-range.mjs390 B
  • scripts/finalize.mjs796 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.