Does it support industry security standards?

Absolutely. It automatically maps findings to MITRE ATT&CK techniques, MITRE ATLAS for ML security, OWASP Top 10 categories, and CWE IDs.

Can I add my company logo to the reports?

Yes, the skill supports custom branding via a JSON configuration where you can specify company names, logos, primary colors, and footer text.

What report formats does this skill support?

The Security Report Builder generates reports in three primary formats: interactive HTML dashboards, print-ready PDF files, and editable DOCX documents.

Is this skill suitable for large codebases?

Yes, it is highly optimized for performance, capable of parsing roughly 1,000 plugins per second and handling 500 findings per second during analysis.

How does context-aware filtering work?

It analyzes the surrounding code to distinguish between true vulnerabilities and safe operations, such as identifying that clearing innerHTML with an empty string is a safe operation rather than a risk.

Security Report Builder

Name: Security Report Builder
Author: diegocconsolini

bydiegocconsolini

•

Seguridad y Pruebas

Transforms raw security scanner results into professional, context-aware reports for executives and technical teams.

Acerca de

Security Report Builder is a high-performance documentation tool that converts raw security scan data into actionable, multi-format reports. By utilizing intelligent false positive filtering, it analyzes code context to reduce noise and adjust severity levels accurately. It integrates seamlessly with global security standards like MITRE ATT&CK and OWASP Top 10, offering customizable templates for HTML, PDF, and DOCX outputs. This skill is essential for teams needing to bridge the gap between technical vulnerability scans and professional compliance or executive reporting.

Características Principales

Context-aware analysis reducing false positives from 90% to under 20%
Framework mapping for MITRE ATT&CK, OWASP Top 10, and CWE classification
Automated risk scoring and prioritization based on real-world code impact
2 GitHub stars
Customizable templates for Executive, Technical, and Compliance reporting needs
Multi-format generation including interactive HTML, branded PDF, and editable DOCX

Casos de Uso

Generating professional, branded audit packages for regulatory compliance
Creating high-level executive summaries for C-suite risk assessment
Automating daily security posture reports for engineering teams

Acerca de

Características Principales

Context-aware analysis reducing false positives from 90% to under 20%
Framework mapping for MITRE ATT&CK, OWASP Top 10, and CWE classification
Automated risk scoring and prioritization based on real-world code impact
2 GitHub stars
Customizable templates for Executive, Technical, and Compliance reporting needs
Multi-format generation including interactive HTML, branded PDF, and editable DOCX

Casos de Uso

Generating professional, branded audit packages for regulatory compliance
Creating high-level executive summaries for C-suite risk assessment
Automating daily security posture reports for engineering teams