Compile validated vulnerability findings into a structured bug bounty report.
npx skills add https://github.com/n4igme/randscript --skill sc5-report
Please help me install this Agent Skill. Skill: sc5-report Source: https://github.com/n4igme/randscript/tree/main/llm/skills/scode/sc5-report Command: npx skills add https://github.com/n4igme/randscript --skill sc5-report
This step consolidates validated vulnerability findings into a professional bug bounty submission report, providing a clear executive summary, detailed findings, and a remediation roadmap.
Run sc5-report with your validated-vulnerabilities.md to generate the bug bounty report.
High-intent search queries and answers about installing and using this skill.
To generate a bug bounty report, provide your validated-vulnerabilities.md file. The system compiles the findings into a structured document with an executive summary, detailed technical evidence, and a remediation roadmap.
Formatting CVSS scores and CWE references for submission platforms requires mapping severities to platform rubrics. The report automatically structures these metrics alongside business impact to meet standard bug bounty requirements.
Creating an executive summary and remediation roadmap involves consolidating static vulnerability data with supporting context. The output provides clear business impact analysis and prioritized remediation steps suitable for executive review.
You do not strictly need recon and threat model data, but the system coordinates with recon.md and threat-model.md files. Including this supporting context enriches the vulnerability findings and improves the overall remediation planning quality.
Yes, you can use static vulnerability data to produce an executive-ready report. The process applies to validated-vulnerabilities.md files, transforming them into a polished document with structured remediation planning and business impact analysis.
A key limitation is that the report relies on pre-validated static vulnerability data. It does not perform dynamic scanning or initial vulnerability discovery, meaning raw, unvalidated findings will not produce an accurate CVSS-scored submission.
infantesromeroadrianAutomate subdomain enumeration, asset discovery, and vulnerability hunting workflows.
dparedesiCreate, evaluate, and improve Claude Skills using templates and scoring rubrics.
magnus919Identify and mitigate security weaknesses using OWASP, CWE, and STRIDE/LINDDUN frameworks.
pruizConvert vulnerability assessment data and evidence into Markdown reports.
