git-forensics-scanner

Solid

Git diff forensics for surfacing and classifying code changes for trojan detection

Code & Development 1,160 stars 71 forks Updated today MIT

Install

View on GitHub

Quality Score: 96/100

Stars 20%
100
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

# Git Forensics Scanner Surfaces and classifies all code changes in a repository using git diff analysis, providing structured change sets for downstream semantic analysis. ## Purpose The first phase of nation-state trojan detection: identify exactly what changed, how much changed, and classify each change by risk level. Small diffs in critical code paths are flagged as highest-risk since business-logic trojans typically modify 1-5 lines. ## Capabilities ### Change Set Extraction - Unstaged changes (`git diff`) - Staged changes (`git diff --cached`) - Commit range diffs (`git diff <base>..<head>`) - Branch diffs (`git diff <base>...<head>`) - Per-file patch extraction with full hunk context ### Change Classification - **code** — Logic, algorithms, formulas, control flow - **config** — Constants, parameters, thresholds, defaults - **data-model** — Schemas, types, model properties, ORM mappings - **cosmetic** — Formatting, comments, whitespace, rounding wrappers ### Risk Triage - Files with 1-5 line changes in prediction/financial/auth code → HIGH RISK - Single-character operator changes → CRITICAL RISK - Comment-only changes accompanying code changes → CAMOUFLAGE RISK ## Input Schema ```json { "type": "object", "required": ["projectRoot"], "properties": { "projectRoot": { "type": "string", "description": "Absolute path to the git repository" }, "scanMode": { "type": "string", "enum": ["uncommitted", "commit-range", "branch-dif...

Details

Author
a5c-ai
Repository
a5c-ai/babysitter
Created
4 months ago
Last Updated
today
Language
JavaScript
License
MIT

Similar Skills

Semantically similar based on skill content — not just same category

Code & Development Solid

diff-analysis

Analyze changesets with risk scoring, categorization by type/impact, and release note preparation

297 Updated today
athola
AI & Automation Listed

repo-forensics

Security forensics for git repos, AI skills, and MCP servers. Audits dependencies, detects prompt injection, credential theft, runtime dynamism, manifest drift, known CVEs, CISA KEV (actively exploited) vulns, and 2026 attack patterns. Not for fixing vulnerabilities or pentesting.

93 Updated 1 weeks ago
alexgreensh
Code & Development Listed

git-analysis

Analyze git repository changes, branch differences, and commit history. Use when analyzing branches, comparing changes, examining commit history, or preparing for PR/commit operations.

335 Updated today
aiskillstore
Code & Development Listed

git-history-analyzer

Use this agent when you need to understand the historical context of code changes, trace code pattern origins, or analyze commit history patterns. Unlike repo-research-analyst (repo structure and docs), this agent focuses on git log archaeology.

9 Updated today
jikig-ai
Code & Development Listed

review-diff

Scan git diffs for project-specific anti-patterns. Triggers on: 'scan diff', 'check diff', 'anti-pattern check', 'pattern scan', 'review changes'.

0 Updated today
lethilu4796