GoKawiilTrail of Bits releases patching-bugs and regression-hunt plugins with OpenAI
Trail of Bits has released two agent-based plugins, patching-bugs and regression-hunt, built through its Patch the Planet collaboration with OpenAI. The patching-bugs plugin reproduces reported bugs and develops and tests fixes, while regression-hunt checks whether changes break previously working, supported behavior. The company says a review of over 130 merged Patch the Planet PRs found 21 regressions, none of which broke a security protection.
GoKawiil's interpretation of the reporting above, not reported fact.
The plugins aim to standardize how AI agents assist with security patching, letting maintainers set their own assumptions and requirements so automated fixes stay within a project's rules. Trail of Bits reports regression-hunt produces 25% fewer false positives than a generic Codex review prompt, suggesting structured workflows could make agent-assisted patching more reliable than ad hoc prompting. The disclosed regression count also signals that even reviewed, maintainer-merged AI-assisted patches carry a nontrivial error rate that teams adopting such tools may need to budget for.
- Trail of Bits released patching-bugs and regression-hunt, two agent plugins for automated bug fixing and regression detection.
- Built with OpenAI under the Patch the Planet initiative, which has co-authored patches for major open-source projects.
- A review of 130+ merged patches found 21 regressions, none affecting security protections, and regression-hunt cut false positives by 25% versus a baseline agent.
Source: blog.trailofbits.com, 2026-10-21
Published there as: “AI agent fixed the bug, but what else did it change?”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.