# WinDiff Version Diff Analysis > Has your agent diff two Windows builds with WinDiff and explain what changed in syscalls, symbols and mitigations, and why it matters. A community Agent Skill by Erwan Grelet (ergrelet) from WinDiff, his open-source tool for browsing and comparing symbol, type and syscall information in Microsoft Windows binaries across versions. The skill compares two Windows builds or patch levels and turns the raw delta into a security-research report: what was added, what it probably does, and why it matters for attack surface, exploitation or defense. What you can do with it - Compare two Windows versions or KB updates for binaries such as ntoskrnl.exe, ntdll.dll, win32k*.sys, ci.dll and cng.sys - Find new or changed syscalls, symbols, types, mitigation flags, callbacks and ETW telemetry - Spot changes to code-integrity behavior, drivers and attack surface - Get findings explained with Windows-internals context and framed for anti-malware and EDR, anti-cheat, or vulnerability-research readers How it works - Run it from a WinDiff repository checkout. It writes a minimal config for the two builds and the binaries you pick, then runs windiff_cli to build the databases. - Its diff script computes the changes per binary, so nothing is counted by hand, and the agent writes the interpretation. - If you already have WinDiff databases, it skips generation and diffs those. Good to know - Generating databases downloads binaries via Winbindex and symbols from Microsoft's symbol server, so it needs network access and takes minutes per binary. - It needs Rust (for windiff_cli) and Python for the helper scripts. - Built for defensive and vulnerability research on public Windows builds. - Type: Skill - Made by: ergrelet - Category: Security - Formats: Skills - Version: 25bc2dc - Source: https://github.com/ergrelet/windiff/tree/HEAD/skills/windiff-version-diff-analysis - Page: https://pluginboard.ai/skills/windiff-version-diff-analysis ## Works with - ChatGPT - Claude - Gemini - GitHub Copilot - Cursor - Claude Code - Codex - Antigravity - Gemini CLI - Replit - OpenClaw - OpenCode - Hermes Agent ## Install ### ChatGPT In ChatGPT: Download the windiff-version-diff-analysis folder and zip it, then Plugins → Skills → Create → Upload from your computer. Business and Enterprise plans. View the folder on GitHub: https://github.com/ergrelet/windiff/tree/HEAD/skills/windiff-version-diff-analysis ### Claude In Claude (web or desktop): Download the windiff-version-diff-analysis folder and zip the folder itself, then upload it in Customize → Skills. View the folder on GitHub: https://github.com/ergrelet/windiff/tree/HEAD/skills/windiff-version-diff-analysis ### Gemini In Gemini: Download the windiff-version-diff-analysis folder, then at gemini.google.com click Customize → Skills → Create → Upload and pick the folder (or a .zip of it). View the folder on GitHub: https://github.com/ergrelet/windiff/tree/HEAD/skills/windiff-version-diff-analysis ### GitHub Copilot Run in your terminal: ```shell npx -y degit ergrelet/windiff/skills/windiff-version-diff-analysis ~/.copilot/skills/windiff-version-diff-analysis ``` View the folder on GitHub: https://github.com/ergrelet/windiff/tree/HEAD/skills/windiff-version-diff-analysis ### Cursor Run in your terminal: ```shell npx -y degit ergrelet/windiff/skills/windiff-version-diff-analysis ~/.cursor/skills/windiff-version-diff-analysis ``` View the folder on GitHub: https://github.com/ergrelet/windiff/tree/HEAD/skills/windiff-version-diff-analysis ### Claude Code Run in your terminal: ```shell npx -y degit ergrelet/windiff/skills/windiff-version-diff-analysis ~/.claude/skills/windiff-version-diff-analysis ``` View the folder on GitHub: https://github.com/ergrelet/windiff/tree/HEAD/skills/windiff-version-diff-analysis ### Codex Run in your terminal: ```shell npx -y degit ergrelet/windiff/skills/windiff-version-diff-analysis ~/.agents/skills/windiff-version-diff-analysis ``` View the folder on GitHub: https://github.com/ergrelet/windiff/tree/HEAD/skills/windiff-version-diff-analysis ### Antigravity In Antigravity: Copy the windiff-version-diff-analysis folder into ~/.gemini/config/skills (Antigravity app and IDE) or ~/.gemini/antigravity-cli/skills (Antigravity CLI). View the folder on GitHub: https://github.com/ergrelet/windiff/tree/HEAD/skills/windiff-version-diff-analysis ### Gemini CLI Run in your terminal: ```shell npx -y degit ergrelet/windiff/skills/windiff-version-diff-analysis ~/.gemini/skills/windiff-version-diff-analysis ``` View the folder on GitHub: https://github.com/ergrelet/windiff/tree/HEAD/skills/windiff-version-diff-analysis ### Replit Run in your terminal: ```shell npx -y degit ergrelet/windiff/skills/windiff-version-diff-analysis .agents/skills/windiff-version-diff-analysis ``` View the folder on GitHub: https://github.com/ergrelet/windiff/tree/HEAD/skills/windiff-version-diff-analysis ### OpenClaw Run in your terminal: ```shell npx -y degit ergrelet/windiff/skills/windiff-version-diff-analysis ~/.openclaw/skills/windiff-version-diff-analysis ``` View the folder on GitHub: https://github.com/ergrelet/windiff/tree/HEAD/skills/windiff-version-diff-analysis ### OpenCode Run in your terminal: ```shell npx -y degit ergrelet/windiff/skills/windiff-version-diff-analysis ~/.config/opencode/skills/windiff-version-diff-analysis ``` View the folder on GitHub: https://github.com/ergrelet/windiff/tree/HEAD/skills/windiff-version-diff-analysis ### Hermes Agent Run in your terminal: ```shell npx -y degit ergrelet/windiff/skills/windiff-version-diff-analysis ~/.hermes/skills/windiff-version-diff-analysis ``` View the folder on GitHub: https://github.com/ergrelet/windiff/tree/HEAD/skills/windiff-version-diff-analysis --- From Pluginboard (https://pluginboard.ai).