Agent skill · Audited from source

diffity-diff

skill · kamranahmedse/diffityMIT licenceAudited 20 Oct 2026 · source 3f95355de05f

★ 888pushed 3 days ago

✕BLOCKGrade D · 69/100 · 22 findings · 3f95355

888repo stars · whole kamranahmedse/diffity

Read the findings View source on GitHub ↗

Is it safe? No — BLOCK, grade D (69/100). We read this skill's source at commit 3f95355de05f and observed filesystem and network access and no hard-coded secrets. The audit raised 22 findings, 1 critical or high. What it does: Mac app to review the code written by you or your agent with Claude in the loop.

Ask an AI about this pageGChatGPT CClaude PPerplexity GeGemini XGrok

CoCopilot AIGoogle AI Mode

Cite

Cite this page

ModelsAtlas. “diffity-diff (kamranahmedse/diffity)”. Retrieved 20 Oct 2026. https://modelsatlas.com/skills/kamranahmedse/diffity-diff

Blocked. The page stays public so you can check this skill if someone recommended it to you. The audit found 1 critical or high finding, starting with “Privilege escalation / persistence” in src/features/claude/shell-label.ts:238. Do not install it without reading them.

5 skills are called “diffity-diff”. You are viewing kamranahmedse/diffity. 5 of them are BLOCK.

kamranahmedse/diffity★ 888✕BLOCK
kamranahmedse/diffity★ 894✕BLOCK
kamranahmedse/diffity★ 891✕BLOCK
nilbuild/diffity★ 891✕BLOCK
nilbuild/diffity★ 889✕BLOCK

Trust audit

Audit 0.4.1 · source read 20 Oct 2026

Trust score69/100✕BLOCK D

0 critical1 high8 medium9 low4 info

BLOCK means the audit found something that could harm you or your machine. Grade D is shared by 642 of 14,816 audited skills.

What the source does

FilesystemDeclared9 observations
NetworkDeclared3 observations
ShellNone observedNo commands run in the source
DependenciesNot pinnedSome versions float
SecretsNone foundNo keys in source

Five audit layers

Layer	What we check	Result	Findings
`L0` Provenance	Repo owner, licence, archive status, activity	WARN	6
`L1` Static source	Secrets, path traversal, supply chain, hidden code	FAIL	14
`L2` Instructions	Prompt injection, authority framing, hidden directives	WARN	1
`L3` Inventory	The files and declarations match the source	WARN	1
`L4` Sandbox	Run in isolation and watch behaviour	SKIPPED why	0

Gates applied: no behavioural pass.

Findings (22)

HIGHPrivilege escalation / persistencepriv.escalate · src/features/claude/shell-label.ts:238

F-06 Privilege escalation / persistenceCWE-269 · CWE-250Layer L1

if (all[0] === 'npx' || all[0] === 'sudo' || all[0] === 'time') {

Why: asks for elevated privileges
Fix: —

MEDIUMInventory / provenanceinv.binary · src-tauri/icons/dev/icon.icns

F-13 Inventory / provenanceCWE-1104Layer L0

icon.icns

Why: a compiled or binary member cannot be reviewed from source
Fix: ship source, or explain the binary in the README

MEDIUMInventory / provenanceinv.binary · src-tauri/icons/icon.icns

F-13 Inventory / provenanceCWE-1104Layer L0

icon.icns

Why: a compiled or binary member cannot be reviewed from source
Fix: ship source, or explain the binary in the README

MEDIUMFilesystem / pathfs.system_paths · src-tauri/src/agents/detect.rs:438

F-05 Filesystem / pathCWE-22 · CWE-59Layer L1

let spec = opencode_launch(Path::new("/usr/local/bin/opencode"));

Why: No further detail recorded for this rule.
Fix: —

MEDIUMFilesystem / pathfs.system_paths · src-tauri/src/agents/detect.rs:439

F-05 Filesystem / pathCWE-22 · CWE-59Layer L1

assert_eq!(spec.command, Path::new("/usr/local/bin/opencode"));

Why: No further detail recorded for this rule.
Fix: —

MEDIUMFilesystem / pathfs.system_paths · src/lib/mock-api-agents.ts:443

F-05 Filesystem / pathCWE-22 · CWE-59Layer L1

{ id: 'claude', name: 'Claude Code', installed: true, binaryPath: '/usr/local/bin/claude', authenticated: true, note: null },

Why: No further detail recorded for this rule.
Fix: —

MEDIUMFilesystem / pathfs.system_paths · src/lib/mock-api.ts:611

F-05 Filesystem / pathCWE-22 · CWE-59Layer L1

{ id: 'claude', name: 'Claude Code', installed: true, binaryPath: '/usr/local/bin/claude', authenticated: true, note: null },

Why: No further detail recorded for this rule.
Fix: —

MEDIUMPrompt injectionscope.undeclared_system · <declared scope>

F-01 Prompt injectionCWE-94 · CWE-1427Layer L2

system use found in code, not declared in the description

Why: the description does not admit a capability the code has
Fix: declare system use in the description, or remove it

MEDIUMInventory / provenanceskill.no_skill_md

F-13 Inventory / provenanceCWE-1104Layer L3

Why: no SKILL.md at the audited path
Fix: a skill without its instruction file cannot be reviewed as one

LOWFilesystem / pathfs.system_paths · src-tauri/tests/repo_tree.rs:174

F-05 Filesystem / pathCWE-22 · CWE-59Layer L1

assert_eq!(tree::read_file(&repo.path, "/etc/passwd").unwrap_err().code, "invalid");

Why: No further detail recorded for this rule.
Fix: —

LOWFilesystem / pathfs.traversal · src-tauri/src/agents/prompts.rs:5

F-05 Filesystem / pathCWE-22 · CWE-59Layer L1

const REVIEW: &str = include_str!("../../prompts/review.md");

Why: No further detail recorded for this rule.
Fix: —

LOWFilesystem / pathfs.traversal · src-tauri/src/agents/prompts.rs:6

F-05 Filesystem / pathCWE-22 · CWE-59Layer L1

const RESOLVE: &str = include_str!("../../prompts/resolve.md");

Why: No further detail recorded for this rule.
Fix: —

LOWFilesystem / pathfs.traversal · src-tauri/src/agents/prompts.rs:7

F-05 Filesystem / pathCWE-22 · CWE-59Layer L1

const ASK: &str = include_str!("../../prompts/ask.md");

Why: No further detail recorded for this rule.
Fix: —

LOWFilesystem / pathfs.traversal · src-tauri/src/agents/prompts.rs:8

F-05 Filesystem / pathCWE-22 · CWE-59Layer L1

const EXPLAIN: &str = include_str!("../../prompts/explain.md");

Why: No further detail recorded for this rule.
Fix: —

LOWFilesystem / pathfs.traversal · src-tauri/src/agents/prompts.rs:9

F-05 Filesystem / pathCWE-22 · CWE-59Layer L1

const SUMMARIZE: &str = include_str!("../../prompts/summarize.md");

Why: No further detail recorded for this rule.
Fix: —

LOWPrivilege escalation / persistencepriv.escalate · .github/workflows/dev-build.yml:71

F-06 Privilege escalation / persistenceCWE-269 · CWE-250Layer L1

sudo xcode-select -s "$newest"

Why: asks for elevated privileges
Fix: —

LOWPrivilege escalation / persistencepriv.escalate · .github/workflows/release.yml:89

F-06 Privilege escalation / persistenceCWE-269 · CWE-250Layer L1

sudo xcode-select -s "$newest"

Why: asks for elevated privileges
Fix: —

LOWSupply chainsupply.unpinned · package.json

F-08 Supply chainCWE-829 · CWE-1357Layer L1

@types/node

Why: 1 dependency range(s) float
Fix: pin exact versions or ship a lockfile

INFOInventory / provenanceinv.oversize · .github/screenshots/palette.gif

F-13 Inventory / provenanceCWE-1104Layer L0

.github/screenshots/palette.gif

Why: 1039597 bytes not read
Fix: —

INFOInventory / provenanceinv.oversize · src-tauri/icons/Assets.car

F-13 Inventory / provenanceCWE-1104Layer L0

src-tauri/icons/Assets.car

Why: 1632808 bytes not read
Fix: —

INFOInventory / provenanceinv.oversize · src-tauri/icons/dev/Assets.car

F-13 Inventory / provenanceCWE-1104Layer L0

src-tauri/icons/dev/Assets.car

Why: 1557384 bytes not read
Fix: —

INFOInventory / provenanceinv.oversize · web/public/screenshots/palette.gif

F-13 Inventory / provenanceCWE-1104Layer L0

web/public/screenshots/palette.gif

Why: 1039597 bytes not read
Fix: —

Audit 0.4.1 · source sha 3f95355de05f · 20 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

Publisherkamranahmedse GitHub userOwner of the repository this skill is read from
Source folderkamranahmedse/diffityThe exact folder we audited
LicenceMITAs the repository states it
Commit pinned for this verdict3f95355de05fA new audit runs when the source changes
Repository statusNot archivedLast push 3 days ago
Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

We did not capture a SKILL.md for this skill, so there is no instruction text to quote here.

Install

Pinned to the audited commit 3f95355

git clone https://github.com/kamranahmedse/diffity
git -C diffity checkout 3f95355de05f

The author documents no install command, so this uses the repository directly. Our verdict covers commit 3f95355de05f only.

Works in which agents?

What its own text says, not a test

“Mentioned” means the skill’s text names the agent. We have not run it there.
Agent	Status	More
Claude Code	Mentioned in its text, not tested	Skills for Claude Code · About Claude Code
Codex	Mentioned in its text, not tested	Skills for Codex · About Codex

Audit history

Every audit, every source change

2026-10-20
✕BLOCK D 69 / 100
first audit · source 3f95355de05f

Similar skills

Docker Patterns✕BLOCK

affaan-m/ECC

Docker and Docker Compose patterns for local development, container security, networking, volume strategies, and multi-service orchestration. Use when setting up containerized development environments or reviewing…

★ 263kGrade D

loom-transcript✕BLOCK

n8n-io/n8n

Fetch and display the full transcript from a Loom video URL. Use when the user wants to get or read a Loom transcript.

★ 208kGrade D

claude-api✕BLOCK

anthropics/skills

Reference for the Claude API / Anthropic SDK — model ids, pricing, params, streaming, tool use, MCP, agents, caching, token counting, model migration. TRIGGER — read BEFORE opening the target file; don't skip because it…

★ 177kGrade D

Questions about diffity-diff

What does the diffity-diff skill do?

Mac app to review the code written by you or your agent with Claude in the loop.

Is diffity-diff safe to install?

No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.

What can diffity-diff access on my machine?

The audit observed that it reaches the network and reads or writes files. Each of those is consistent with what it says it does. Secrets in the source: none found.

Which assistants does diffity-diff work with?

Its documentation mentions claude-code and codex. That is what the text claims, not a compatibility test we ran.

How current is this page?

The grade is for one exact copy of the source (3f95355de05f), read on 2026-10-20. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

github.com/kamranahmedse/diffity — the audited source at commit 3f95355de05f and every finding aboveObserved · 20 Oct 2026

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.

What does the diffity-diff skill do?
GChatGPT CClaude PPerplexity
Is diffity-diff safe to install?
GChatGPT CClaude PPerplexity
What can diffity-diff access on my machine?
GChatGPT CClaude PPerplexity