What problem does it solve? Turning confirmed vulnerability findings into professional, submission-ready reports is slow and inconsistent. This Skill standardizes the final phase of a security testing pipeline by converting triage-approved findings into structured HackerOne-format reports with consistent severity scoring and evidence chains. ## Core Features & Use Cases - HackerOne-Standard Reports: Generates reports with Summary, Steps to Reproduce, PoC, Impact, CVSS 3.1, and Mitigation sections following the platform's expected structure. - CVSS 3.1 Scoring: Produces vector strings and numeric scores with a severity reference table covering Critical through Low findings. - Evidence Chains: Outputs minimal PoC curl commands, annotated evidence references, and remediation guidance with CWE references. - Use Case: After a triage stage confirms an IDOR on /api/users/{id}, use this Skill to produce a complete report titled "IDOR on /api/users/{id} allows unauthorized access to user PII" with reproduction steps and a CVSS score ready for submission. ## Quick Start Generate a HackerOne-format report with CVSS scoring and PoC evidence for the triage-approved finding on the target endpoint.
