security-report-builder

Convert plugin security scanner JSON into HTML, PDF, and DOCX reports.

6|Updated Oct 18, 2025
One-click install
npx skills add https://github.com/diegocconsolini/ClaudeSkillCollection --skill security-report-builder
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-report-builder
Source: https://github.com/diegocconsolini/ClaudeSkillCollection/tree/main/security-report-builder
Command: npx skills add https://github.com/diegocconsolini/ClaudeSkillCollection --skill security-report-builder

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires jinja2, weasyprint, python-docx, pandas, numpy, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Quickly transform raw plugin security scanner results into polished HTML, PDF, and DOCX reports with context-aware risk assessment and false-positive reduction.

Core Features & Use Cases

  • Multi-format output (HTML, PDF, DOCX) for executives, engineers, and auditors.
  • Context-aware analysis to reduce false positives and improve risk prioritization.
  • Framework mappings (MITRE ATT&CK, ATLAS, OWASP, CWE) to strengthen reporting.

Quick Start

python3 security-report-builder/scripts/generate_report.py --input scan_results.json --output report.html --formats html,pdf,docx

Frequently Asked Questions about security-report-builder

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I convert security scan results into executive reports?

Security report builder transforms raw scanner output into multi-format reports (HTML, PDF, DOCX) with context-aware risk assessment. Feed structured JSON scan data through the generate_report.py script to produce polished documents aligned with MITRE ATT&CK and OWASP frameworks for executives, engineers, and auditors.

Can I generate PDF and DOCX reports from the same security scanner data?

Yes. The Skill outputs HTML, PDF, and DOCX simultaneously from a single JSON input. Specify multiple formats in the --formats flag (html,pdf,docx) to produce all three report types in one run, reducing false positives and prioritizing risk across formats.

What file formats does security report generation support?

Security report builder produces HTML dashboards, PDF printables, and editable DOCX documents from JSON scanner input. Each format serves a distinct audience—HTML for interactive review, PDF for distribution, and DOCX for customization and compliance documentation.

How does context-aware analysis reduce false positives in security reports?

Context-aware analysis evaluates findings against plugin type and application context to suppress low-confidence alerts. Combined with taint analysis and framework mappings (CWE, OWASP), it improves risk prioritization so reports surface genuine threats for executives and auditors.

Do I need Python 3 and specific dependencies to build security reports?

Yes. Security report builder requires Python 3 with jinja2, weasyprint, python-docx, pandas, and numpy. These dependencies handle templating, PDF conversion, DOCX generation, and data processing—verify your environment supports them before running generate_report.py.

What's the best way to align security findings with compliance frameworks?

Security report builder maps findings to MITRE ATT&CK, ATLAS, OWASP, and CWE frameworks during report generation. This alignment strengthens compliance audits and regulatory documentation by translating raw scanner results into industry-standard threat and vulnerability categories.