Report Regressions
Use when assembling or refreshing an evidence-linked regression report from saved...
Install
npx skills add trailofbits/skills --skill report-regressions -g -a claude-code -y- Repository
- trailofbits/skills7.9k
- Category
- Engineering
- Updated
- 7d ago
- License
- CC-BY-SA-4.0
- Context cost
- Lightabout 557 tokens
- Runs scripts
- No, instructions only
What it does
Use when assembling or refreshing an evidence-linked regression report from saved campaign decisions.
Report a campaign
When to Use
Input: frozen scope.json, campaign index, progress ledger, sealed stage packages
and registry assignment.
Follow project guidance for every scoped change before reporting.
When NOT to Use
Adjudicating evidence or repairing records; return those needs to the caller.
Report
- Read the standard, labels and file contract. Reconcile the index against frozen scope, assigned changes and discovered candidates. Preserve PR/commit IDs and accepted duplicate mappings.
- Run report.py via
uv run --no-projectwith the campaign directory and--output ASSIGNED_DIRECTORY/reportsto render HTML, Markdown and JSON. Exit 1 means changed evidence or an invalid index; return its diagnostics and record the stage as blocked. Exit 0 may includeUNRESOLVEDfindings; report eachunresolved_reasonand theverificationlevel of confirmed findings. Never repair decisions, invent evidence or edit hashes to pass validation. - Inspect counts and links. Preserve adjudicated outcomes/ratings. Separate incomplete fixes, latent/pre-existing bugs, rejected claims and unresolved work from confirmed totals.
- Ensure reports include coverage gaps, setup/execution evidence, rating reasons
and pending human review. Report missing information; do not claim completion
while required content is absent.
Seal
report-stage.jsonwith the assigned inputs and generated reports as artifacts; record validation failures as blocked.
Report Back
Keep detailed findings in the reports. Return only:
