Does it support industry security standards?

Absolutely. It automatically maps findings to MITRE ATT&CK techniques, MITRE ATLAS for ML security, OWASP Top 10 categories, and CWE IDs.

Can I add my company logo to the reports?

Yes, the skill supports custom branding via a JSON configuration where you can specify company names, logos, primary colors, and footer text.

What report formats does this skill support?

The Security Report Builder generates reports in three primary formats: interactive HTML dashboards, print-ready PDF files, and editable DOCX documents.

Is this skill suitable for large codebases?

Yes, it is highly optimized for performance, capable of parsing roughly 1,000 plugins per second and handling 500 findings per second during analysis.

How does context-aware filtering work?

It analyzes the surrounding code to distinguish between true vulnerabilities and safe operations, such as identifying that clearing innerHTML with an empty string is a safe operation rather than a risk.

Security Report Builder

Name: Security Report Builder
Author: diegocconsolini

bydiegocconsolini

•

Security & Testing

Transforms raw security scanner results into professional, context-aware reports for executives and technical teams.

Security Report Builder is a high-performance documentation tool that converts raw security scan data into actionable, multi-format reports. By utilizing intelligent false positive filtering, it analyzes code context to reduce noise and adjust severity levels accurately. It integrates seamlessly with global security standards like MITRE ATT&CK and OWASP Top 10, offering customizable templates for HTML, PDF, and DOCX outputs. This skill is essential for teams needing to bridge the gap between technical vulnerability scans and professional compliance or executive reporting.

Key Features

01Context-aware analysis reducing false positives from 90% to under 20%

02Framework mapping for MITRE ATT&CK, OWASP Top 10, and CWE classification

03Automated risk scoring and prioritization based on real-world code impact

042 GitHub stars

05Customizable templates for Executive, Technical, and Compliance reporting needs

06Multi-format generation including interactive HTML, branded PDF, and editable DOCX

Use Cases

01Generating professional, branded audit packages for regulatory compliance

02Creating high-level executive summaries for C-suite risk assessment

03Automating daily security posture reports for engineering teams

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add diegocconsolini/claudeskillcollection security-report-builder

For use in Claude.ai and ChatGPT

Download Skill