What problem does it solve?
Converts triage outputs and optional engagement plans into a polished, evidence-backed penetration test report or bug bounty submission so assessors can produce consistent deliverables without manual formatting or missed evidence checks. It enforces an evidence-gated workflow by requiring triage.md and optionally consuming plan.md to populate scope, findings, and reproduction steps.
Core Features & Use Cases
- Automated Report Generation: Reads triage.md and optionally plan.md to produce a full markdown penetration test report with executive summary, findings table, and per-finding details.
- Bug Bounty Mode: Produces HackerOne/Bugcrowd-friendly bug reports when requested, saving time when submitting to programs.
- Evidence-Gated Findings: Requires direct tool output or evidence entries from triage to avoid hallucinated or unsupported findings.
- Use Case: After completing an assessment, run the skill to transform triage artifacts into a dated report file stored under ~/pentest-toolkit/results/<target>/, ready for distribution or submission.
Quick Start
Write a full pentest report for target example.com using the saved triage.md and plan.md if available.