Claude Skills · Code Review & Testing
Windiff Version Diff Analysis
ergrelet/windiffGenerate and interpret security-research diffs between Windows versions or patch levels using this repo's WinDiff CLI and databases. Use when comparing Windows builds or binaries such as ntoskrnl.exe, ntdll.dll, win32k*.sys, ci.dll, or cng.sys to find changed syscalls, symbols, types, mitigation flags, callbacks, ETW/EtwTi telemetry, code-integrity behavior, drivers, or attack surface. Explain likely intent and security relevance with Windows-internals knowledge, and frame findings for anti-malware/EDR, anti-cheat, and vulnerability-research audiences rather than returning an uninterpreted sym...
At a glance
This skill is for Code Review & Testing and helps you analyze security diffs between windows versions, compare windows binaries for syscall changes, and identify attack surface changes in windows builds.
git clone --depth 1 https://github.com/ergrelet/windiff
cp -r windiff/skills/windiff-version-diff-analysis ~/.claude/skills/windiff-version-diff-analysis
Setup, runtime and requirements describe ergrelet/windiff, the repo this skill ships in.
Windows InternalsSecurity Researchbinary-analysisSyscallsVulnerability ResearchAnti Malware
Other Code Review & Testing skills
Migrate test files from `as` type assertions to @total-typescript/shoehorn. Use when user mentions shoehorn, wants to replace `as` in tests,...
A relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.
Move issues and external PRs through a state machine of triage roles — categorise, verify, grill if needed, and write agent-ready briefs.
Create exercise directory structures with sections, problems, solutions, and explainers that pass linting. Use when user wants to scaffold e...
Use when you need to resolve an in-progress git merge/rebase conflict.
A relentless interview that asks every frontier question at once, round by round.