| name | pentest-report |
| description | Generate PDF security report from findings. |
| user-invocable | true |
| allowed-tools | ["Bash","Agent","Read"] |
/pentest-report — Generate Security Report
Generate a professional PDF security report from previously collected pentest findings.
Input
An optional findings directory path can be provided via $ARGUMENTS. Defaults to ./findings/ if not specified.
Steps
-
Determine findings directory:
- If
$ARGUMENTS contains a path, use that.
- Otherwise, default to
./findings/.
-
Verify findings exist:
Check that the findings directory contains result files. If empty, inform the user they need to run scans first (suggest /pentest-full or individual scan skills).
-
Delegate to report-agent using the Agent tool. The agent must run:
pentest report ./findings/
-
Read the command output to determine the report file location.
-
Present the report location to the user:
- Full path to the generated PDF report
- Summary of what the report contains (number of findings by severity)
- Suggest sharing the report with the development/security team
Notes
- The report is generated from JSON findings in the
./findings/ directory.
- Run scans before generating a report. The more scans completed, the more comprehensive the report.
- The report includes: executive summary, methodology, detailed findings with evidence, and remediation recommendations.