pentest-agent-reporting

Assemble and redact security assessment reports from normalized findings and evidence records.

Updated Jul 30, 2026
One-click install
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill pentest-agent-reporting
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pentest-agent-reporting
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/pentest-agent-reporting
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill pentest-agent-reporting

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill solves the challenge of manually compiling complex security assessment findings into professional, redacted reports while ensuring sensitive data like credentials or internal network details are never leaked.

Core Features & Use Cases

  • Multi-Format Support: Generate reports tailored for bug-bounty platforms, executive leadership, technical teams, or forensic investigations.
  • Automated Redaction: Automatically scrubs sensitive tokens, keys, and PII from evidence before report generation.
  • Use Case: After completing a red-team engagement, use this skill to aggregate all findings and evidence into a polished, redacted technical report ready for client delivery.

Quick Start

Use the pentest-agent-reporting skill to generate a technical markdown report for the current engagement.

Frequently Asked Questions about pentest-agent-reporting

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate pentest report generation from raw security findings?

Automated pentest report generation assembles normalized findings and evidence records into structured reports, applying strict redaction logic to ensure sensitive credentials and proof data are excluded from final outputs.

Can I generate different pentest report formats like executive summaries and bug-bounty submissions?

Yes, pentest reports can be generated in diverse formats including bug-bounty platform submissions, executive leadership summaries, technical documentation, and forensic investigation reports tailored for security engagements.

How are sensitive credentials and PII redacted from security assessment reports?

Redaction logic automatically scrubs sensitive tokens, security keys, and personally identifiable information from evidence records before report generation, preventing internal network details and credentials from leaking.

What is the best way to compile redacted technical reports after a red-team engagement?

The best way to compile redacted technical reports is to aggregate all normalized findings and evidence records, letting automated redaction scrub sensitive data before generating a polished client-ready document.

Do I need normalized findings and evidence records to generate security assessment reports?

Yes, normalized findings and evidence records are required as input data to automate the assembly and strict redaction of security assessment reports across various supported formats.

Why does automated report redaction exclude proof data from final pentest outputs?

Automated report redaction excludes proof data to enforce strict security compliance, ensuring sensitive credentials, internal network details, and exploitable evidence are never leaked in final client-facing documents.