skills.rest
jpoley
jpoleyCOMMUNITY
Explore all skills by this author →
Website𝕏@jbpoleyGitHub

security-reporter

Consolidates vulnerability findings into audit reports with risk assessment and compliance mapping.

50|9|Updated Oct 15, 2025
Search Tags:#OWASP#security#audit#compliance#reporting#risk
One-click install
npx skills add https://github.com/jpoley/flowspec --skill security-reporter
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reporter
Source: https://github.com/jpoley/flowspec/tree/main/.claude/skills/security-reporter
Command: npx skills add https://github.com/jpoley/flowspec --skill security-reporter

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security teams currently spend excessive time consolidating findings from multiple scanners into final audit reports. This Skill streamlines that workflow by aggregating results, assessing risk, and producing OWASP Top 10/compliance-aligned deliverables for stakeholders.

Core Features & Use Cases

  • Data aggregation & synthesis: Consolidate findings from diverse security tools into a single, coherent report.
  • Risk assessment & prioritization: Evaluate severity, likelihood, and business impact to prioritize remediation.
  • Compliance mapping: Align findings with OWASP Top 10, CWE, and MITRE ATT&CK and generate checklists.
  • Executive reporting: Create concise summaries that communicate risk and recommended actions to non-technical leadership.
  • Remediation planning: Propose concrete remediation steps with risk-based prioritization.

Quick Start

Use the security-reporter to generate an OWASP-aligned security audit from the latest scan results in docs/security/scan-results.json.

Frequently Asked Questions about security-reporter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I consolidate security scan findings into an audit report?▼

Security-reporter consolidates findings from multiple scanners into a single audit report. It aggregates results, assesses risk severity and business impact, and produces OWASP Top 10-aligned deliverables ready for stakeholders and executive review.

Can I map vulnerabilities to OWASP Top 10 and compliance frameworks?▼

Yes. Security-reporter aligns findings with OWASP Top 10, CWE, and MITRE ATT&CK standards, then generates compliance checklists and mappings so audit results connect directly to recognized security frameworks.

How do I prioritize remediation from security audit results?▼

Security-reporter evaluates severity, likelihood, and business impact to rank vulnerabilities by risk. It proposes concrete remediation steps ordered by priority, enabling teams to address the highest-impact issues first.

What input format does security-reporter accept for scan results?▼

Security-reporter ingests findings from docs/security/scan-results.json. It consolidates data from diverse security tools into a single structured input, so you aggregate results from any scanner that exports JSON.

Does security-reporter create executive summaries from technical findings?▼

Yes. Security-reporter transforms detailed vulnerability data into concise executive summaries that communicate risk and recommended actions to non-technical leadership without technical jargon.

Related Skills

Explore More Legal & Compliance Skills→
dapperdiversdapperdivers
1

report-generator

Generate structured markdown penetration test reports from JSON security scan findings.

Community
Intermediate
dodygdodyg

report-generation

Generate formatted accessibility audit reports with severity scores and VPAT/ACR exports.

Community
Intermediate
Ed1s0nZEd1s0nZ
5.6k

vulnerability-assessment

Assess system and application vulnerabilities with CVSS risk scoring.

Community
Advanced
michaelalbermichaelalber
2

dotnet-security-review

Review .NET applications for OWASP Top 10 vulnerabilities and Telerik CVEs.

Community
Advanced