redteam-report-template

Generates client-facing red-team engagement reports in a six-section finding format with DOCX export.

Updated Sep 6, 2026
One-click install
npx skills add https://github.com/inventashif/helpful-code-sidekick --skill redteam-report-template-inventashif
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: redteam-report-template
Source: https://github.com/inventashif/helpful-code-sidekick/tree/main/scripts/hackerai/skills/bughunter/redteam-report-template
Command: npx skills add https://github.com/inventashif/helpful-code-sidekick --skill redteam-report-template-inventashif

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pandoc, python-docx.

What problem does it solve? Writing a professional red-team deliverable for an enterprise client is slow and error-prone: findings need consistent structure, calibrated severity, reproducible PoCs, and polished DOCX output. This Skill codifies the Subject / Observations / Description / Impact / Recommendation / PoC format so every finding ships client-ready. ## Core Features & Use Cases - Six-Section Finding Format: Enforces Subject, Observations, Description, Impact, Recommendation, and PoC per finding, with severity and status fields tuned for red-team engagements (including "patched mid-engagement"). - Full Document Structure: Provides the complete report skeleton — executive summary, risk summary table, findings, recon appendix, IoCs, and cleanup statement. - DOCX Generation Pipeline: Converts markdown to DOCX via pandoc with embedded screenshots, a reference style template, and image-count verification. - Use Case: After a one-week external red-team engagement with 14 confirmed findings, use this Skill to package them into a severity-ordered markdown report and render a branded DOCX with 16 embedded evidence screenshots for the client's CISO. ## Quick Start Use the redteam-report-template skill to package my confirmed engagement findings into a client-facing red-team report and generate the final DOCX with embedded screenshots.

Frequently Asked Questions about redteam-report-template

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I write a red-team report for an enterprise client?

Structure each finding with six sections: Subject, Observations, Description, Impact, Recommendation, and PoC. Order findings by severity, add an executive summary, risk table, recon appendix, IoCs, and a cleanup statement, then convert to DOCX with pandoc.

What is the difference between a red-team report and a bug-bounty report?

Red-team reports target CISOs and mixed stakeholders with business-framed impact, status fields like patched mid-engagement, and informational findings. Bug-bounty reports target triagers with one finding per submission and platform-specific severity scoring.

How do I convert a markdown pentest report to DOCX with images?

Use pandoc with a reference.docx style template, set --resource-path to your screenshot folder, and enable --toc. Verify the result with python-docx by counting embedded image relationships against markdown image references.

Should I include findings that stopped reproducing during the engagement?

Yes. A confirmed finding that stopped working usually means the client patched mid-engagement. Mark the status as Confirmed; patched mid-engagement, keep the pre-patch PoC as evidence, and include timestamps showing when it broke.

When should I not use this red-team report template?

Do not use it for bug-bounty platform submissions on HackerOne, Bugcrowd, or Intigriti, quick proof-of-concept memos, or internal team writeups. Those audiences need different formats, tone, and severity conventions.