---
title: "Security Scan Diff - Air Market"
description: "Code has gone in since your last tagged release and you want to know whether anything in it is hostile before you ship. This looks through the git diff between a tag or commit and HEAD, hunting for m…"
canonical: "https://airmarket.ai/app/security-scan-diff"
---

[Air Market](/) / [Security](/category/security) / Security Scan Diff

Skill by [dyoshikawa](/@dyoshikawa)

# Security Scan Diff

Look for malicious code in what changed since the last release

## What this does

Code has gone in since your last tagged release and you want to know whether anything in it is hostile before you ship. This looks through the git diff between a tag or commit and HEAD, hunting for malicious code. Reach for it at the point where you are about to cut a release or accept a batch of changes.

### Top 3 things it does for you

- Scan a diff for malicious code
- Check what landed between a tag and HEAD

## Information

**Security Scan Diff at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [dyoshikawa](/@dyoshikawa) |
| Category | [Security](/category/security) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Size | 3 KB |
| Licence | MIT |
| Repository | [dyoshikawa/rulesync](https://github.com/dyoshikawa/rulesync/tree/759069e16eee238207a766aa400e86d6a1128272/.rulesync/skills/security-scan-diff) |
| GitHub stars | 1,341 (as of Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of Security Scan Diff and flagged nothing. AIR's verdict: **safe**.

**What Security Scan Diff's check was run against**

|  |  |
| --- | --- |
| Commit | 759069e16eee238207a766aa400e86d6a1128272 |
| Content hash | dd9231a729d0f06344a45da85f032b47f72c2dec88a1962c6ba380fdc96a2e44 |
| Files read | [Browse the files at this exact commit](https://github.com/dyoshikawa/rulesync/blob/759069e16eee238207a766aa400e86d6a1128272/.rulesync/skills/security-scan-diff/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for Security Scan Diff](/security/security-scan-diff)

## About Security Scan Diff

Scans for malicious code in the git diff between a tag or commit and HEAD.

## What's inside

- SKILL.md - instructions

## Questions

### Is Security Scan Diff safe to install?

AIR scanned this exact version of Security Scan Diff and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit 759069e16eee, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/security-scan-diff.

### How do I install Security Scan Diff?

Open https://airmarket.ai/app/security-scan-diff on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/dyoshikawa/rulesync/tree/759069e16eee238207a766aa400e86d6a1128272/.rulesync/skills/security-scan-diff. Install from that link, not the branch.

## Related on Air Market

- [More Security listings](/category/security)
- [Everything by dyoshikawa](/@dyoshikawa)

---

Canonical URL: <https://airmarket.ai/app/security-scan-diff>