report

Generate security reports from scanner findings in Markdown, HTML, JSON, and SARIF formats.

12|1|Updated Feb 9, 2026

Search Tags:#security #vulnerability #analysis #compliance #report #findings

Ready to run

npx skills add https://github.com/florianbuetow/claude-code --skill report-florianbuetow

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: report
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/report
Command: npx skills add https://github.com/florianbuetow/claude-code --skill report-florianbuetow

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the generation of comprehensive security reports, transforming raw findings and scanner data into actionable insights for stakeholders.

Core Features & Use Cases

Automated Report Generation: Creates human-readable security reports from findings, scanner results, and analysis data.
Customizable Output: Supports multiple formats (Markdown, HTML, JSON, SARIF) and includes configurable depth and scope.
Use Case: Generate an executive security summary for management, detailing critical vulnerabilities, remediation progress, and recommended actions.

Quick Start

Generate a deep security report in markdown format for all findings.

Frequently Asked Questions about report

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I generate a security report from raw scanner outputs and JSON findings?▼

To generate a security report, you parse accumulated JSON findings, historical data, and raw scanner outputs to produce formatted reports. This process analyzes security posture, identifies risks, and tracks remediation progress automatically.

Can I export security findings in SARIF or HTML format?▼

Yes, you can export security findings in multiple formats including Markdown, HTML, JSON, and SARIF. The report generation supports configurable depth and scope to customize the output format according to stakeholder needs.

What is the best way to map attack paths and track vulnerability remediation?▼

Mapping attack paths and tracking vulnerability remediation is accomplished by analyzing accumulated scanner results and findings data. This approach identifies security risks, maps potential attack vectors, and monitors remediation progress within the generated reports.

Does this security analysis tool work without external dependencies?▼

Yes, security report generation operates without external dependencies. It directly parses JSON findings, historical data, and raw scanner outputs internally to produce comprehensive formatted reports without requiring additional environment setup.

How do I create an executive security summary for management from vulnerability data?▼

To create an executive security summary, you generate a report detailing critical vulnerabilities, remediation progress, and recommended actions. This transforms raw scanner data into actionable insights customized for management stakeholders.

What limitations exist when analyzing security posture from raw scanner outputs?▼

Limitations when analyzing security posture include reliance on the quality and structure of accumulated JSON findings and raw scanner outputs. The report generation requires parsing historical data effectively to accurately identify risks and map attack paths.