Agent skill
security-report
Generate security assessment reports in docx format with findings, risk ratings, and remediation recommendations. Use when: User asks for security audit report, vulnerability assessment document, penetration test report, or compliance gap analysis document. Keywords: security report, audit findings, vulnerability report, pentest report
Install this agent skill to your Project
npx add-skill https://github.com/aiskillstore/marketplace/tree/main/skills/bytr-ecosystems/security-report
SKILL.md
Security Report Generator
Quick Start
from docx import Document
from docx.shared import Pt, Inches, RGBColor
from docx.enum.text import WD_ALIGN_PARAGRAPH
doc = Document()
doc.add_heading('Security Assessment Report', 0)
Core Workflow
- Create document with standard sections (see structure below)
- Apply risk rating colors (Critical=red, High=orange, Medium=yellow, Low=green)
- Generate findings table with severity sorting
- Add remediation timeline
- Save to
/mnt/user-data/outputs/
Document Structure
1. Executive Summary (1 page max)
2. Scope & Methodology
3. Risk Summary (table + chart)
4. Detailed Findings (sorted by severity)
- Finding ID
- Title
- Severity + CVSS
- Description
- Evidence
- Remediation
- References
5. Remediation Roadmap
6. Appendices
Critical Gotchas
- Table borders: Must set each cell border explicitly, no table-level setting
- Color codes: Use RGBColor(r,g,b), not hex strings
- Page breaks: Add before major sections with
doc.add_page_break()
Risk Rating Colors
RISK_COLORS = {
'Critical': RGBColor(192, 0, 0), # Dark red
'High': RGBColor(255, 102, 0), # Orange
'Medium': RGBColor(255, 192, 0), # Yellow
'Low': RGBColor(0, 176, 80), # Green
'Info': RGBColor(91, 155, 213) # Blue
}
Advanced Features
- EXECUTIVE_SUMMARY.md - C-level friendly language
- CVSS_CALCULATOR.md - Scoring methodology
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
perigon-backend
Perigon ASP.NET Core + EF Core + Aspire conventions
perigon-agent
Pointers for Copilot/agents to apply Perigon conventions
perigon-angular
Angular 21+ standalone/Material/signal conventions for Perigon WebApp
fastapi-mastery
Comprehensive FastAPI development skill covering REST API creation, routing, request/response handling, validation, authentication, database integration, middleware, and deployment. Use when working with FastAPI projects, building APIs, implementing CRUD operations, setting up authentication/authorization, integrating databases (SQL/NoSQL), adding middleware, handling WebSockets, or deploying FastAPI applications. Triggered by requests involving .py files with FastAPI code, API endpoint creation, Pydantic models, or FastAPI-specific features.
context7-efficient
Token-efficient library documentation fetcher using Context7 MCP with 86.8% token savings through intelligent shell pipeline filtering. Fetches code examples, API references, and best practices for JavaScript, Python, Go, Rust, and other libraries. Use when users ask about library documentation, need code examples, want API usage patterns, are learning a new framework, need syntax reference, or troubleshooting with library-specific information. Triggers include questions like "Show me React hooks", "How do I use Prisma", "What's the Next.js routing syntax", or any request for library/framework documentation.
browser-use
Browser automation using Playwright MCP. Navigate websites, fill forms, click elements, take screenshots, and extract data. Use when tasks require web browsing, form submission, web scraping, UI testing, or any browser interaction.
Didn't find tool you were looking for?