set-core: Skill for Claude Code

.claude/skills/regression-baseline/SKILL.md

regression-baseline is a skill for Claude Code from tatargabor/set-core. It costs 86 tokens per session (1,404 once invoked), scanned A, original, MIT.

How to tell a real test regression from this repo's pre-existing failure debt — the set-diff against a baseline worktree, the three import roots and the session-end leak assertion that make the baseline an actual baseline, and why a stash inside a killable command must never be used. Use before claiming a test suite…

Skill for Claude Code

Written for Claude Code: installed under .claude/. Also seen: mentions CLAUDE.md.

This is tatargabor/set-core's own configuration. It tells Claude Code how to work on set-core itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything set-core configures →

Reuse

Borrowing it

Nothing to install: this file belongs to tatargabor/set-core. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/tatargabor/set-core/main/.claude/skills/regression-baseline/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/tatargabor/set-core

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for regression-baseline

README.md
[![agentmods](https://agentmods.dev/badge/skills/tatargabor/set-core/regression-baseline.svg)](https://agentmods.dev/skills/tatargabor/set-core/regression-baseline)
Your own site
<a href="https://agentmods.dev/skills/tatargabor/set-core/regression-baseline"><img src="https://agentmods.dev/badge/skills/tatargabor/set-core/regression-baseline.svg" alt="Measured on agentmods" height="20"></a>
Per session 86 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,404 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin unknown No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00086 $0.01404
Opus 5 $0.00043 $0.00702
Sonnet 5 $0.00017 $0.00281
Haiku 4.5 $0.00009 $0.00140

Measured today against content hash a2d67e19ac98, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

regression-baseline scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/regression-baseline/SKILL.md · 88 lines

How it starts

The opening of the file, as written. The whole thing — 88 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Measuring a regression in this repo

Moved out of CLAUDE.md on 2026-08-22 so it loads when a regression is actually being measured. Nothing was cut — the text below is that block verbatim.

Known unrelated debt — and the figure is not the check. Measured on a pristine checkout of HEAD (2026-07-24, late): 81 failed / ~2980 passed / 21 errors, and the failures are not confined to test_web_api_write.py + test_web_integration.py. Pre-existing and outside the current track.

Do not quote this number as a baseline. It has now been stale twice in one file: "17 failed" understated it by ~77, and "94 / 2631 / 21" — written earlier the same day — was off by 352 passing tests within hours. The passing count also moves a few tests between runs. A debt figure is a measurement with a timestamp, and a stale one waves a real regression through as "expected".

The check that works is a set diff against a baseline you actually ran. Never a stash inside a killable command — a timeout between the stash and the pop leaves a clean tree and the whole session's work in stash@{0}, which looks exactly like a command that never started:

git worktree add -q --detach /tmp/base HEAD
python -m pytest tests/unit -q -p no:randomly 2>&1 | grep -E "^(FAILED|ERROR) " | sed 's/ - .*//' | sort > /tmp/now.txt
# THREE import roots, and a session-end assertion that nothing leaked. Both matter — see below.
cat > /tmp/leakcheck.py <<'EOF'
import os, sys
def pytest_sessionfinish(session, exitstatus):
    base = os.environ["BASELINE_ROOT"]
    leaks = sorted({m.__name__ for m in list(sys.modules.values())
                    if getattr(m, "__file__", None) and "/set-core/" in str(m.__file__)
                    and not str(m.__file__).startswith(base)})
    if leaks:
        print(f"BASELINE LEAK ({len(leaks)}): " + ", ".join(leaks[:25]), file=sys.stderr)
        session.exitstatus = 99
EOF
(cd /tmp/base && BASELINE_ROOT=/tmp/base/ \
   PYTHONPATH=/tmp/base/lib:/tmp/base/modules/web:/tmp/base:/tmp \
   python -m pytest tests/unit -q -p no:randomly -p leakcheck 2>&1 \
    | grep -E "^(FAILED|ERROR) " | sed 's/ - .*//' | sort) > /tmp/base.txt
diff /tmp/base.txt /tmp/now.txt   # empty = no regression, whatever the counts say
git worktree remove /tmp/base --force

The PYTHONPATH line and the assertion are not decoration — without them this check does not compare two versions. Measured 2026-07-24: set-core is installed editable, so its __editable___set_core_0_3_0_finder resolves set_orch to /home/…/set-core/lib from anywhere. A worktree at /tmp/base therefore ran the BASELINE TESTS against the WORKING TREE's library — a hybrid, not a baseline.

Its fail direction is what makes it expensive: the usual change is additive, so old tests still pass against new code and the failure sets come out identical. The check then reports "no regression" having compared one version with itself, and it does so most convincingly exactly when it is least earned. It only became visible when two baseline tests failed that could not fail at HEAD — the hybrid's own tell, and it appeared by luck.

So: point PYTHONPATH at the worktree's source roots, and assert where the imports came from before believing the run. This is the proxy-instead-of-the-thing class applied to a version: cd-ing into a worktree is a proxy for running its code.

And the first repair of it was itself incomplete, which is the more useful half. It set PYTHONPATH=/tmp/base/lib and asserted set_orch — one package, named by hand. Measured afterwards, prompted by an integration peer generalising the finding on their own side: this repo puts first-party code under three roots, and a raw .pth entry hard-codes modules/web to the development tree. set_project_web is imported by 10+ unit test files and was still coming from the working tree, so the "corrected" baseline was still partly hybrid. The named list was a second copy, and it drifted at the moment it was written.

Read the full file on GitHub · 88 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today First seen · 88 lines · 86 tokens per session scan A a2d67e19ac98

Subscribe to this mod's changes

regression-baseline is a skill published in the GitHub repository tatargabor/set-core (35 stars, last pushed today), licensed MIT. It adds 86 tokens to every session and 1,404 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-06.