security-report
Compile a security posture report from Strix data. Use when the user asks for a weekly or monthly security report, a summary of scan activity, new and fixed findings, remediation trends, or supply-chain risk for leadership, engineering, or a customer.
ソース情報
- リポジトリ
- usestrix/cursor-plugin
- ソースの最終更新活動
- 2026年10月27日 12:41
- 検出された SKILL.md の言語
- 英語
- スター
- 0
- フォーク
- 0
インストール方法
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
ソースファイルを確認
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
SKILL.md を表示中
SKILL.md
ソースの指示 · 読み取り専用プレビュー- name
- security-report
- description
- Compile a security posture report from Strix data. Use when the user asks for a weekly or monthly security report, a summary of scan activity, new and fixed findings, remediation trends, or supply-chain risk for leadership, engineering, or a customer.
# Strix security report
Write a periodic security report from scans, findings, PR reviews, and supply-chain data.
## When
- The user wants a report for a period, for example the last 7 or 30 days.
Do not use this skill to summarize one scan (call `get_scan` directly) or to triage findings (triage-findings).
## How
1. Ask for the audience when it is not clear: engineering, leadership, or customer. Default to engineering.
2. Call `get_analytics_overview` with `range` set to the period, for example `7d` or `30d`, to get the KPIs, the severity breakdown, and the remediation trends.
3. Call `list_scans` and `list_pr_reviews` with `date_from` set to the start of the period.
4. Call `list_vulnerabilities` with `status` `open` twice: once with `severity` `critical` and once with `severity` `high`. Page through both result sets.
5. Call `get_supply_chain_org_summary` for the dependency risk position.
6. Write the report with these sections: Highlights, New findings, Fixed findings, Open critical and high findings, Scan and review activity, Recommendations for next period.
## Style
- Use plain language for leadership and customer audiences. Keep technical detail for engineering.
- Cite finding ids so readers can open them in Strix.
- Do not change any data while you compile the report.
GitHubで見る