regression

Detect reintroduced security vulnerabilities by analyzing code changes against a historical fix log.

12|1|Updated Feb 9, 2026
One-click install
npx skills add https://github.com/florianbuetow/claude-code --skill regression-florianbuetow
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: regression
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/regression
Command: npx skills add https://github.com/florianbuetow/claude-code --skill regression-florianbuetow

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automatically detects if previously fixed security vulnerabilities have been reintroduced into the codebase, ensuring that security fixes remain effective over time.

Core Features & Use Cases

  • Automated Regression Testing: Verifies that code changes haven't brought back old security flaws.
  • Fix History Analysis: Reads a history of applied fixes to compare against current code.
  • Use Case: Before merging a pull request, run this skill to automatically scan for any reintroduced vulnerabilities, preventing critical security issues from reaching production.

Quick Start

Run a deep security regression check on the current branch.

Frequently Asked Questions about regression

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect if a previously fixed security vulnerability has been reintroduced in a pull request?▼

Security regression testing detects reintroduced vulnerabilities by analyzing code changes against a historical fix log. You can run this check before merging a pull request to scan for old security flaws and prevent critical issues from reaching production.

What is security regression testing and when do I need it in a CI/CD pipeline?▼

Security regression testing verifies that code changes haven't brought back previously fixed vulnerabilities. You need it in a CI/CD pipeline before merging code to ensure security fixes remain effective over time and prevent degraded fixes.

How do I automate vulnerability management checks for reintroduced security flaws?▼

Automate vulnerability management by running regression checks that read a history of applied fixes and compare it against current code. The findings emit in JSON format, allowing seamless integration into your existing CI/CD workflows.

Can I scope regression testing to specific branch comparisons instead of full historical analysis?▼

Yes, regression testing supports configurable depth, allowing you to scope checks from specific branch comparisons to full historical analysis. You can also apply severity filtering to focus on the most critical security regressions.

What is the best way to generate actionable reports on security regressions for code review?▼

The best way to report security regressions during code review is to emit findings as JSON for CI integration. This provides actionable reports on reintroduced vulnerabilities, degraded fixes, and holding states directly within your pipeline.

Why does a previously patched security vulnerability show up again after a code merge?▼

A patched vulnerability reappears when new code changes inadvertently reintroduce the old flaw. Running security regression checks against a historical fix log before merging catches these regressions, degraded fixes, and holding states early.