Verified:GitHub

escalate-scan

Consolidate, validate, and score penetration testing reports with CVSS.

1|Updated Mar 20, 2026

Search Tags:#reporting #CVSS #penetration-testing #report-aggregation #vulnerability-scoring #fals-positive verification

Ready to run

npx skills add https://github.com/enderphan94/pentest-kit --skill escalate-scan

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: escalate-scan
Source: https://github.com/enderphan94/pentest-kit/tree/main/skills/escalate-scan
Command: npx skills add https://github.com/enderphan94/pentest-kit --skill escalate-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of merging, deduplicating, verifying, and scoring penetration test reports to produce a reliable, consolidated findings overview.

Core Features & Use Cases

Report aggregation: Combines multiple scan reports into a unified results set.
Finding re-verification: Passively confirms the validity of each vulnerability to filter false positives.
Risk assessment: Assigns business impact levels and scores using CVSS, providing actionable insights.
Use Case: Security teams use escalate-scan to validate and prioritize findings from different scanning tools, producing comprehensive reports for remediation planning.

Quick Start

Run the escalate-scan skill with paths to JSON reports to automatically verify and score vulnerabilities.

Frequently Asked Questions about escalate-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I consolidate multiple penetration testing reports into a single unified findings overview?▼

To consolidate penetration testing reports, you can input multiple JSON scan reports to automatically merge, deduplicate, and format them into a unified results set for efficient vulnerability management.

How does passive false positive verification work for vulnerability scanning?▼

Passive false positive verification confirms the validity of each detected vulnerability without active exploitation, filtering out invalid findings to ensure only accurate results proceed to risk assessment.

How do I assign CVSS scores and business impact levels to security audit findings?▼

You can automatically score security audit findings by applying CVSS metrics and filtering based on scope and impact considerations, assigning actionable business impact levels for remediation planning.

Can I use this report aggregation approach with multiple scanning tools during a security audit?▼

Yes, this approach is designed for security audits involving multiple scan tools and report types, allowing security teams to validate and prioritize findings from different sources into a comprehensive report.

What are the limitations of passive verification for vulnerability scoring?▼

Passive verification methods confirm finding validity without active probing, meaning this approach relies on available report data and may not validate vulnerabilities requiring active exploitation to prove impact.