Can I use this for remediation planning?

Absolutely. It generates a remediation roadmap that categorizes fixes into Immediate (7 days), Short-term (30 days), and Long-term (90 days) based on severity and risk.

Does it support the latest OWASP standards?

Yes, it specifically maps vulnerabilities to the OWASP Top 10 (2021) categories, providing checklists for items like Broken Access Control and Cryptographic Failures.

How is the security posture calculated?

The skill uses a logic-based formula where any Critical or High vulnerabilities mark a project as 'AT RISK', while Medium/Low findings result in a 'CONDITIONAL' status.

What does the Security Reporter skill do?

It acts as an expert security analyst that synthesizes raw scan data into comprehensive audit reports, including executive summaries, risk analysis, and prioritized remediation steps.

Security Audit Reporter

Name: Security Audit Reporter
Author: jpoley

byjpoley

•

セキュリティとテスト

Generates professional security audit reports by aggregating vulnerability scan results and mapping them to compliance frameworks like OWASP Top 10.

The Security Reporter skill transforms technical vulnerability data into structured, professional security audit reports. It automates the synthesis of scan results, calculates overall security posture, and provides detailed remediation roadmaps. By mapping findings to the OWASP Top 10 and CWE standards, it bridges the gap between raw security data and actionable business intelligence, making it an essential tool for developers and security analysts who need to communicate risks to stakeholders effectively.

主な機能

01OWASP Top 10 (2021) compliance mapping and checklists

025 GitHub stars

03Automated security posture calculation (Secure, Conditional, At Risk)

04Prioritized remediation roadmapping with effort estimates

05Executive summary generation for non-technical stakeholders

06Technical deep-dives including CWE mapping and CVSS scoring

ユースケース

01Conducting a formal security assessment to prepare for compliance reviews

02Synthesizing results from multiple security scanners into a single, cohesive audit report

03Generating an actionable remediation plan for development teams after a vulnerability discovery

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jpoley/flowspec security-reporter

For use in Claude.ai and ChatGPT

Download Skill