Generates comprehensive security reports from vulnerability findings, scanner results, and analysis data.
The Security Report Generator skill automates the creation of professional Application Security (AppSec) documentation by aggregating data from findings, fix history, and scanner outputs. It provides developers and stakeholders with actionable insights through executive summaries, detailed findings tables, remediation progress tracking, and architectural diagrams. Designed for flexibility, it supports multiple output formats including SARIF for GitHub integration and adjustable depth levels ranging from quick tables to expert-level risk scoring and compliance mapping.
Key Features
01Multi-format support including Markdown, HTML, JSON, and SARIF
026 GitHub stars
03Automated Mermaid architecture diagrams and attack path mapping
04Detailed remediation tracking and scanner coverage analysis
05Configurable report depth from quick summaries to expert deep-dives
06Executive summary generation with overall posture assessment
Use Cases
01Analyzing scanner coverage gaps to identify missing security testing tools
02Exporting security findings to SARIF for integration with the GitHub Security tab
03Creating executive summaries for stakeholders to review security posture before a release
