find-bugs

Find Bugs

Review changes on this branch for bugs, security vulnerabilities, and code quality issues.

When to Use

• You need a review focused on bugs, security issues, or risky code changes.
• The task involves auditing the current branch diff rather than implementing new behavior.
• You want a structured review process with checklist-driven verification against changed files.

Phase 1: Complete Input Gathering

1. Get the FULL diff: git diff $(gh repo view --json defaultBranchRef --jq '.defaultBranchRef.name')...HEAD
2. If output is truncated, read each changed file individually until you have seen every changed line
3. List all files modified in this branch before proceeding

Phase 2: Attack Surface Mapping

For each changed file, identify and list:

• All user inputs (request params, headers, body, URL components)
• All database queries
• All authentication/authorization checks
• All session/state operations
• All external calls
• All cryptographic operations

Phase 3: Security Checklist (check EVERY item for EVERY file)

• [ ] Injection: SQL, command, template, header injection
• [ ] XSS: All outputs in templates properly escaped?
• [ ] Authentication: Auth checks on all protected operations?
• [ ] Authorization/IDOR: Access control verified, not just auth?
• [ ] CSRF: State-changing operations protected?
• [ ] Race conditions: TOCT