Find Bugs
This is a structured code review tool that walks through your branch changes with a security-first mindset. It forces a complete read of the full diff, maps every attack surface (user inputs, database queries, auth checks), then runs through a checklist covering injection, XSS, authorization bypasses, race conditions, and the other usual suspects. The five-phase approach is methodical to the point of being rigid, which is probably the point. It requires you to account for every file and checklist item before giving conclusions, so you can't skip the boring parts. Good for catching the embarrassing stuff before it ships, though the thoroughness means it's overkill for trivial changes.
- skills.sh installs
- 447
- GitHub stars
- 33.2K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add davila7/claude-code-templates --skill find-bugs --agent claude-codeInstalls into .claude/skills of the current project.
Files
Find Bugs
Review changes on this branch for bugs, security vulnerabilities, and code quality issues.
Phase 1: Complete Input Gathering
- Get the FULL diff:
git diff master...HEAD - If output is truncated, read each changed file individually until you have seen every changed line
- List all files modified in this branch before proceeding
Phase 2: Attack Surface Mapping
For each changed file, identify and list:
- All user inputs (request params, headers, body, URL components)
- All database queries
- All authentication/authorization checks
- All session/state operations
- All external calls
- All cryptographic operations
Phase 3: Security Checklist (check EVERY item for EVERY file)
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/davila7/claude-code-templates
- Categories
- Security, Git & Pull Requests, Code Review & Quality
- First seen
- Jun 3, 2026
More from davila7/claude-code-templates
All 618- Langgraph447
- Agent Md Refactor446
- Autonomous Agent Patterns446
- D3 Viz445
- Manim444
- Marketing Psychology443
- Requirements Clarity442
- Frontend To Backend Requirements441
- Canvas Design439
- Nowait Reasoning Optimizer438
- Code Review Checklist437
- Prompt Caching437
- Commit435
- Vercel Deployment433
- C4 Architecture430
- Information Security Manager Iso27001428
- Mlflow427
- Statsmodels426
- Prompt Library423
- Chroma421
- Telegram Mini App420
- Pricing Strategy419
- Seo419
- Evaluating Llms Harness418
Recommended
More Security
code-review-checklistdavila7/claude-code-templatesComprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainability437skills.sh installs
depot-generaldepot/skillsHandles Depot CLI installation, authentication, login, project setup, organization management, and API access. Use when installing the Depot CLI, logging in wit429skills.sh installs
google-workspacejezweb/claude-skillsBuild integrations with Google Workspace APIs (Gmail, Calendar, Drive, Sheets, Docs, Chat, Meet, Forms, Tasks, Admin SDK). Covers OAuth 2.0, service accounts, r428skills.sh installs
session-managementsecondsky/claude-skillsImplements secure session management with JWT tokens, Redis storage, refresh flows, and proper cookie configuration. Use when building authentication systems, m427skills.sh installs
service-mesh-implementationaj-geddes/useful-ai-promptsImplement service mesh (Istio, Linkerd) for service-to-service communication, traffic management, security, and observability.426skills.sh installs
hugging-face-model-trainerhuggingface/skillsThis skill should be used when users want to train or fine-tune language models using TRL (Transformer Reinforcement Learning) on Hugging Face Jobs infrastructu418skills.sh installs