report-writing

Generate standardized security bug reports for HackerOne, Bugcrowd, Intigriti, and Immunefi.

Updated Jun 21, 2026

Search Tags:#bug reporting #impact assessment #security assessment #security research #report template

Ready to run

npx skills add https://github.com/infantesromeroadrian/arca-agent --skill report-writing-infantesromeroadrian

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: report-writing
Source: https://github.com/infantesromeroadrian/arca-agent/tree/main/template/skills/report-writing
Command: npx skills add https://github.com/infantesromeroadrian/arca-agent --skill report-writing-infantesromeroadrian

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires , and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill simplifies the creation of detailed, standardized security bug reports, ensuring accurate communication and efficient triage for security vulnerabilities.

Core Features & Use Cases

Standardized Templates: Provides templates for different platforms (HackerOne, Bugcrowd, Intigriti, Immunefi).
Impact-first Approach: Ensures clear and direct reporting focusing on the severity and potential impact.
Guidelines: Offers human tone guidelines and severity assessment to enhance report quality.
Quick Start: Write an impact-first security report for any platform using the provided templates and guidelines.

Quick Start

Run 'report-writing --generate' to generate a security report based on your findings.

Frequently Asked Questions about report-writing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I generate a security bug report for HackerOne or Bugcrowd?▼

To generate a security bug report for HackerOne or Bugcrowd, run the 'report-writing --generate' command. The Skill automatically applies standardized templates, severity assessments, and human tone guidelines to format your findings for the specific platform.

What is an impact-first security report and when should I use it?▼

An impact-first security report is a standardized vulnerability document that directly highlights severity and potential impact before technical details. You should use it when submitting findings to bug bounty platforms like Intigriti or Immunefi to ensure accurate communication and efficient triage.

Can I use this report-writing tool for Bugcrowd, Intigriti, and Immunefi submissions?▼

Yes, you can use this report-writing tool for Bugcrowd, Intigriti, and Immunefi submissions. It provides predefined template structures tailored for these specific platforms, ensuring your security bug reports meet their standardized formatting and severity assessment requirements.

How do I assess vulnerability severity for a bug bounty report?▼

To assess vulnerability severity for a bug bounty report, the Skill utilizes built-in severity assessment guidelines combined with predefined template structures. This ensures your security bug report accurately communicates the potential impact and severity to triage teams.

What is the best way to standardize security bug reports across different platforms?▼

The best way to standardize security bug reports across different platforms is to use predefined templates with an impact-first approach. This Skill provides templates for HackerOne, Bugcrowd, Intigriti, and Immunefi, applying human tone guidelines for consistent comprehensive report creation.