Prepare Regression
Use when pinning before/after sources and collecting PR or commit context for a...
Install
npx skills add trailofbits/skills --skill prepare-regression -g -a claude-code -y- Repository
- trailofbits/skills7.9k
- Category
- Git and review
- Updated
- 7d ago
- License
- CC-BY-SA-4.0
- Context cost
- Lightabout 476 tokens
- Runs scripts
- No, instructions only
What it does
Use when pinning before/after sources and collecting PR or commit context for a regression investigation.
Prepare a change
When to Use
Input: PR URL or repository plus commit/range, and registry assignment. Follow project guidance after resolving the target commit.
When NOT to Use
The same inputs have a verified preparation record; reuse it.
Prepare
- Read the standard and file contract. Pin the complete change as S0/S1: commit parent or explicit range baseline; merge base to frozen head for unmerged PRs; merge first parent to merge commit, squash parent to squash, or the complete rebased series for merged PRs. Ambiguous ranges and missing root baselines block preparation.
- Freeze commit titles/messages or PR title, body, discussion, reviews and inline comments with URLs and collection time. Paginate APIs; record limits and lifecycle. Locate security/threat-model documents in both states; record paths or search limitations.
- Run snapshot.py via
uv run --no-projectwith repository, S0, S1 and a new directory, or equivalent Git commands for special source needs. Preserve dependency/submodule/LFS revisions. Exclude later history; keep exports pristine and build in separate copies. - Write and seal
prepare.jsonwith boundary explanations, frozen context and source artifacts. If blocked, preserve collected evidence and name the prerequisite.
Report Back
Keep detailed evidence in the sealed package. Return only:
- Status:
completeorblocked, matching the record. - Record: sealed
prepare.jsonpath, or why none was produced. - Result: selected S0/S1 and material collection limitations.
- Blocker: missing prerequisite or required caller action, if blocked.
Rationalizations to Reject
- “The PR is merged”: that does not identify the complete change boundary.

