
Security News
Feross on the 10 Minutes or Less Podcast: Nobody Reads the Code
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.
inspecting-changes-skill
Advanced tools
Pre-execution static analysis skill for AI-generated code changes.
Analyze code changes before running them:
| Mode | Phases | Use Case |
|---|---|---|
| quick | 1, 2, 8 | Fast pre-commit check |
| medium | 1, 2, 2b, 3, 5.1, 8 | Standard review |
| deep | All 9 phases | Major features, pre-deploy |
Install skills from GitHub repository using skills manager:
npx skills add viktar-silakou/inspecting-changes-skill
If package is published to npm:
npx inspecting-changes-skill install
npx inspecting-changes-skill install --target /path/to/project
git clone https://github.com/viktar-silakou/inspecting-changes-skill.git
cd inspecting-changes-skill
node bin/cli.js install --target /path/to/project
Copy skills/inspecting-changes/ folder to:
<project>/.claude/skills/inspecting-changes/~/.claude/skills/inspecting-changes/After installation:
/inspecting-changes
/inspecting-changes quick
/inspecting-changes medium
/inspecting-changes deep
/inspecting-changes deep src/api/
node bin/cli.js list # List available skills
node bin/cli.js install [--target /path/to/project] # Install skill
node bin/cli.js check [--target /path/to/project] # Check if installed
node bin/cli.js update [--target /path/to/project] # Update skill
node bin/cli.js remove [--target /path/to/project] # Remove skill
skills/inspecting-changes/
├── SKILL.md # Main skill definition
├── modules/
│ ├── workflow.md # Execution workflow with checklists
│ ├── output.md # Output format templates
│ ├── tool-rules.md # Read-only analysis rules
│ ├── phase-1-assessment.md # Scope analysis
│ ├── phase-2-flow.md # Execution flow simulation
│ ├── phase-2b-contracts.md # Contract alignment
│ ├── phase-3-architecture.md # SOLID, smells, legacy code
│ ├── phase-4-security.md # Security checklist
│ ├── phase-5-performance.md # Performance with scale context
│ ├── phase-6-errors.md # Error handling
│ ├── phase-7-testing.md # Testability
│ └── phase-8-report.md # Report generation
├── reference/
│ └── severity-guide.md # Issue classification
├── examples/
│ ├── quick-output.md # Sample quick report
│ └── deep-output.md # Sample deep report
└── scripts/
└── validate-skill.mjs # Validation script
npm run validate
MIT
FAQs
Pre-execution static analysis skill for AI-generated code changes
The npm package inspecting-changes-skill receives a total of 0 weekly downloads. As such, inspecting-changes-skill popularity was classified as not popular.
We found that inspecting-changes-skill demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.

Research
/Security News
Campaign of 108 extensions harvests identities, steals sessions, and adds backdoors to browsers, all tied to the same C2 infrastructure.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.