redteam-report-template

Generates client-facing red-team engagement reports with a six-section finding structure and DOCX output.

6|Updated Jan 31, 2026
One-click install
npx skills add https://github.com/Wyl-cmd/kxns-cli --skill redteam-report-template-wyl-cmd
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: redteam-report-template
Source: https://github.com/Wyl-cmd/kxns-cli/tree/main/src/kxns_cli/skills/redteam-report-template
Command: npx skills add https://github.com/Wyl-cmd/kxns-cli --skill redteam-report-template-wyl-cmd

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pandoc, python-docx.

What problem does it solve? Writing a professional red-team deliverable for an enterprise client is slow and error-prone: findings need consistent structure, calibrated severity, reproducible PoCs, and polished DOCX output. This Skill codifies the Subject / Observations / Description / Impact / Recommendation / PoC format so every finding ships client-ready. ## Core Features & Use Cases - Six-Section Finding Format: Enforces Subject, Observations, Description, Impact, Recommendation, and PoC per finding, with severity and red-team-specific status fields like "Confirmed; patched mid-engagement". - Full Document Structure: Provides the complete report skeleton — executive summary, engagement details, risk summary table, findings, recon appendix, IoCs, and cleanup statement. - DOCX Generation Pipeline: Includes a pandoc-based markdown-to-DOCX workflow with embedded screenshots, naming conventions, and image-count verification. - Use Case: After a one-week external red-team engagement, package 14 validated findings with 16 screenshots into a 52KB markdown report and a 2.2MB DOCX deliverable for the client's CISO. ## Quick Start Use the redteam-report-template skill to package my validated engagement findings into a client-facing red-team report with DOCX output.

Frequently Asked Questions about redteam-report-template

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I write a red-team report for an enterprise client?

Structure each finding with six sections: Subject, Observations, Description, Impact, Recommendation, and PoC. Order findings by severity, add an executive summary, risk table, recon appendix, IoCs, and a cleanup statement, then convert to DOCX with pandoc.

What is the difference between a red-team report and a bug-bounty report?

Red-team reports target CISOs and technical stakeholders with business-framed impact, status fields like patched-mid-engagement, and DOCX delivery. Bug-bounty reports target platform triagers with one finding per submission and platform-specific severity scoring.

How do I convert a markdown pentest report to DOCX with images?

Use pandoc with a reference DOCX template, a resource path pointing to your screenshot folder, and table-of-contents flags. Verify the result by counting embedded images with python-docx against the markdown references.

Should I include findings that stopped reproducing during the engagement?

Yes. A confirmed finding that stopped working usually means the client patched mid-engagement. Mark the status as "Confirmed; patched mid-engagement" with timestamps and pre-patch PoC evidence rather than retracting it.

When should I not use this red-team report template?

Do not use it for bug-bounty platform submissions on HackerOne, Bugcrowd, or Intigriti, quick proof-of-concept memos, or internal team writeups. Those audiences need different formats and severity conventions.