escalate-scan

Consolidate, validate, and score penetration testing reports with CVSS.

1|Updated Mar 20, 2026
One-click install
npx skills add https://github.com/enderphan94/pentest-kit --skill escalate-scan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: escalate-scan
Source: https://github.com/enderphan94/pentest-kit/tree/main/skills/escalate-scan
Command: npx skills add https://github.com/enderphan94/pentest-kit --skill escalate-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of merging, deduplicating, verifying, and scoring penetration test reports to produce a reliable, consolidated findings overview.

Core Features & Use Cases

  • Report aggregation: Combines multiple scan reports into a unified results set.
  • Finding re-verification: Passively confirms the validity of each vulnerability to filter false positives.
  • Risk assessment: Assigns business impact levels and scores using CVSS, providing actionable insights.
  • Use Case: Security teams use escalate-scan to validate and prioritize findings from different scanning tools, producing comprehensive reports for remediation planning.

Quick Start

Run the escalate-scan skill with paths to JSON reports to automatically verify and score vulnerabilities.

Frequently Asked Questions about escalate-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I consolidate multiple penetration testing reports into a single unified findings overview?

To consolidate penetration testing reports, you can input multiple JSON scan reports to automatically merge, deduplicate, and format them into a unified results set for efficient vulnerability management.

How does passive false positive verification work for vulnerability scanning?

Passive false positive verification confirms the validity of each detected vulnerability without active exploitation, filtering out invalid findings to ensure only accurate results proceed to risk assessment.

How do I assign CVSS scores and business impact levels to security audit findings?

You can automatically score security audit findings by applying CVSS metrics and filtering based on scope and impact considerations, assigning actionable business impact levels for remediation planning.

Can I use this report aggregation approach with multiple scanning tools during a security audit?

Yes, this approach is designed for security audits involving multiple scan tools and report types, allowing security teams to validate and prioritize findings from different sources into a comprehensive report.

What are the limitations of passive verification for vulnerability scoring?

Passive verification methods confirm finding validity without active probing, meaning this approach relies on available report data and may not validate vulnerabilities requiring active exploitation to prove impact.