Borrowing it
Nothing to install: this file belongs to tatargabor/set-core. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/tatargabor/set-core/main/.claude/skills/regression-baseline/SKILL.mdgit clone --depth 1 https://github.com/tatargabor/set-coreWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tatargabor/set-core/regression-baseline)<a href="https://agentmods.dev/skills/tatargabor/set-core/regression-baseline"><img src="https://agentmods.dev/badge/skills/tatargabor/set-core/regression-baseline.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00086 | $0.01404 |
| Opus 5 | $0.00043 | $0.00702 |
| Sonnet 5 | $0.00017 | $0.00281 |
| Haiku 4.5 | $0.00009 | $0.00140 |
Grade A, and why
regression-baseline scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 88 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Measuring a regression in this repo
Moved out of
CLAUDE.mdon 2026-08-22 so it loads when a regression is actually being measured. Nothing was cut — the text below is that block verbatim.
Known unrelated debt — and the figure is not the check. Measured on a pristine checkout
of HEAD (2026-07-24, late): 81 failed / ~2980 passed / 21 errors, and the failures are
not confined to test_web_api_write.py + test_web_integration.py. Pre-existing and outside
the current track.
Do not quote this number as a baseline. It has now been stale twice in one file: "17 failed" understated it by ~77, and "94 / 2631 / 21" — written earlier the same day — was off by 352 passing tests within hours. The passing count also moves a few tests between runs. A debt figure is a measurement with a timestamp, and a stale one waves a real regression through as "expected".
The check that works is a set diff against a baseline you actually ran. Never a stash
inside a killable command — a timeout between the stash and the pop leaves a clean tree and
the whole session's work in stash@{0}, which looks exactly like a command that never
started:
git worktree add -q --detach /tmp/base HEAD
python -m pytest tests/unit -q -p no:randomly 2>&1 | grep -E "^(FAILED|ERROR) " | sed 's/ - .*//' | sort > /tmp/now.txt
# THREE import roots, and a session-end assertion that nothing leaked. Both matter — see below.
cat > /tmp/leakcheck.py <<'EOF'
import os, sys
def pytest_sessionfinish(session, exitstatus):
base = os.environ["BASELINE_ROOT"]
leaks = sorted({m.__name__ for m in list(sys.modules.values())
if getattr(m, "__file__", None) and "/set-core/" in str(m.__file__)
and not str(m.__file__).startswith(base)})
if leaks:
print(f"BASELINE LEAK ({len(leaks)}): " + ", ".join(leaks[:25]), file=sys.stderr)
session.exitstatus = 99
EOF
(cd /tmp/base && BASELINE_ROOT=/tmp/base/ \
PYTHONPATH=/tmp/base/lib:/tmp/base/modules/web:/tmp/base:/tmp \
python -m pytest tests/unit -q -p no:randomly -p leakcheck 2>&1 \
| grep -E "^(FAILED|ERROR) " | sed 's/ - .*//' | sort) > /tmp/base.txt
diff /tmp/base.txt /tmp/now.txt # empty = no regression, whatever the counts say
git worktree remove /tmp/base --force
The PYTHONPATH line and the assertion are not decoration — without them this check does
not compare two versions. Measured 2026-07-24: set-core is installed editable, so its
__editable___set_core_0_3_0_finder resolves set_orch to /home/…/set-core/lib from
anywhere. A worktree at /tmp/base therefore ran the BASELINE TESTS against the WORKING
TREE's library — a hybrid, not a baseline.
Its fail direction is what makes it expensive: the usual change is additive, so old tests
still pass against new code and the failure sets come out identical. The check then reports
"no regression" having compared one version with itself, and it does so most convincingly
exactly when it is least earned. It only became visible when two baseline tests failed that
could not fail at HEAD — the hybrid's own tell, and it appeared by luck.
So: point PYTHONPATH at the worktree's source roots, and assert where the imports came
from before believing the run. This is the proxy-instead-of-the-thing class applied to a
version: cd-ing into a worktree is a proxy for running its code.
And the first repair of it was itself incomplete, which is the more useful half. It set
PYTHONPATH=/tmp/base/lib and asserted set_orch — one package, named by hand. Measured
afterwards, prompted by an integration peer generalising the finding on their own side: this
repo puts first-party code under three roots, and a raw .pth entry hard-codes
modules/web to the development tree. set_project_web is imported by 10+ unit test files
and was still coming from the working tree, so the "corrected" baseline was still partly
hybrid. The named list was a second copy, and it drifted at the moment it was written.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 88 lines · 86 tokens per session scan A a2d67e19ac98
regression-baseline is a skill published in the GitHub repository tatargabor/set-core (35 stars, last pushed today), licensed MIT. It adds 86 tokens to every session and 1,404 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-06.
Other skills, from other repositories
codew-release-qa-sweep
Use before claiming Codewhale release work is done: run the full gate sweep and list the manual QA targets.
cw-dogfood
Use when a Codewhale change needs proving in the real product, or when asked to build/install/dogfood the local binaries: stamped release build, atomic install, fresh-shell verification, and the manual QA that gates cannot cover.
atmos-hooks
Atmos hooks: lifecycle events, hook kinds, command/store/git/security hooks, step/steps hooks, when: conditions, scoping and overrides, toolchain integration, --skip-hooks, and Atmos Pro/local output.
atmos-validation
Validate Atmos projects, components, arbitrary JSON Schema inputs, EditorConfig, and GitHub Actions; use affected-file selection and native CI annotations.
atmos-pro
Atmos Pro setup and workflows: settings.pro, GitHub OIDC, affected and inventory uploads, stack locks, pro commit, workflow dispatch, merge queues, and drift detection.
atmos-git
Atmos Git and GitOps: git.repositories, clone/pull/status/diff/commit/push/clean, local Git hook shims, signed commits, managed workdirs, fork-PR trust gate, and auth via identities or github/sts.