What happens if I move my code to a different file?

The skill is designed to handle file renames and moves. It tracks patterns and function names, labeling these as 'RELOCATED' so you can verify the fix still works in its new home.

Can this skill be used in an automated CI/CD pipeline?

Yes. By using the --format json flag, the skill provides machine-readable output and returns a non-zero exit status if regressions are found, making it ideal for build gates.

How does the skill know which vulnerabilities were previously fixed?

The skill reads from a .appsec/fixed-history.json file, which stores details of findings verified as fixed. You can build this history by running /appsec:verify on resolved issues.

What is the difference between Standard and Deep analysis depths?

Standard depth uses semantic analysis to see if a fix is still present even if code changed. Deep depth traces data flows to ensure refactored code hasn't created new paths to old sinks.

Security Regression Detection

Name: Security Regression Detection
Author: florianbuetow

byflorianbuetow

•

보안 및 테스팅

Prevents the reintroduction of security vulnerabilities by verifying historical fixes against current code changes.

The Security Regression Detection skill ensures that once a security vulnerability is fixed, it stays fixed. By analyzing the project's historical fix records stored in .appsec/fixed-history.json, this skill performs multi-level analysis—ranging from literal pattern matching to deep data-flow verification—to detect if old bugs or vulnerable patterns have returned. It acts as a specialized security gate for pull requests and releases, helping developers maintain a robust security posture as the codebase evolves and refactors.

주요 기능

01Intelligent classification system that identifies regressions, degraded fixes, and relocated code.

026 GitHub stars

03Flexible scoping to check specific branches, uncommitted changes, or the entire fix history.

04CI/CD integration support with JSON formatting and non-zero exit codes for failing checks.

05Automated findings generation for detected regressions with original CWE and severity metadata.

06Multi-depth analysis levels ranging from quick pattern matching to expert-level bypass analysis.

사용 사례

01Building a verifiable audit trail of resolved vulnerabilities and their current status for compliance.

02Verifying codebase integrity after large-scale refactoring to confirm security logic remains intact.

03Running automated pre-merge security gates to ensure PRs don't accidentally revert critical security patches.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add florianbuetow/claude-code regression

For use in Claude.ai and ChatGPT

Download Skill