Agent skill
security-report
Generate security assessment reports in docx format with findings, risk ratings, and remediation recommendations. Use when: User asks for security audit report, vulnerability assessment document, penetration test report, or compliance gap analysis document. Keywords: security report, audit findings, vulnerability report, pentest report
Install this agent skill to your Project
npx add-skill https://github.com/majiayu000/claude-skill-registry/tree/main/skills/documents/security-report-bytr-ecosystems-ml-reference-guides
SKILL.md
Security Report Generator
Quick Start
from docx import Document
from docx.shared import Pt, Inches, RGBColor
from docx.enum.text import WD_ALIGN_PARAGRAPH
doc = Document()
doc.add_heading('Security Assessment Report', 0)
Core Workflow
- Create document with standard sections (see structure below)
- Apply risk rating colors (Critical=red, High=orange, Medium=yellow, Low=green)
- Generate findings table with severity sorting
- Add remediation timeline
- Save to
/mnt/user-data/outputs/
Document Structure
1. Executive Summary (1 page max)
2. Scope & Methodology
3. Risk Summary (table + chart)
4. Detailed Findings (sorted by severity)
- Finding ID
- Title
- Severity + CVSS
- Description
- Evidence
- Remediation
- References
5. Remediation Roadmap
6. Appendices
Critical Gotchas
- Table borders: Must set each cell border explicitly, no table-level setting
- Color codes: Use RGBColor(r,g,b), not hex strings
- Page breaks: Add before major sections with
doc.add_page_break()
Risk Rating Colors
RISK_COLORS = {
'Critical': RGBColor(192, 0, 0), # Dark red
'High': RGBColor(255, 102, 0), # Orange
'Medium': RGBColor(255, 192, 0), # Yellow
'Low': RGBColor(0, 176, 80), # Green
'Info': RGBColor(91, 155, 213) # Blue
}
Advanced Features
- EXECUTIVE_SUMMARY.md - C-level friendly language
- CVSS_CALCULATOR.md - Scoring methodology
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
Didn't find tool you were looking for?