security-report

name	security-report
description	Generate a comprehensive security report with executive summary, detailed findings, remediation roadmap, and compliance mapping. Supports markdown and HTML output.

Security Report Skill

Overview

Generate a comprehensive security assessment report from scan results.

Inputs

• Scan results (from /scan skill)
• Fix results (from /fix skill, if available)
• Report format: "markdown" (default), "html", or "json"

Report Sections

1. Executive Summary

• Overall security health score (0-100)
• Critical/High finding count
• Top 3 risks with business impact
• Remediation cost estimate (LOC)

2. Findings Detail

For each finding:

• Severity badge and OWASP/CWE mapping
• Affected file and line number
• Description of vulnerability
• Proof of concept (how it could be exploited)
• Recommended fix
• Fix status (available/pending/applied)

3. Before/After Comparison (if fixes applied)

• Side-by-side diff of vulnerable vs fixed code
• Verification that scanner no longer flags the issue

4. Compliance Mapping

• OWASP Top 10 coverage matrix
• OWASP LLM Top 10 coverage (for agent code)
• CWE mapping for each finding

5. Remediation Roadmap

• Priority-ordered fix plan
• Estimated effort per fix (LOC)
• Total remediation cost
• Quick wins vs deep fixes

6. Dependency Health

• Vulnerable packages list
• Upgrade recommendations
• License compliance issues

Output

• Markdown report file
• Optional HTML with embedded charts
• Print-ready format for stakeholder distribution

Guardrails

• Never include actual secrets or credentials in reports
• Redact sensitive file paths if requested
• Include scanner version and rule set for reproducibility