How do I install the Torusguard Report skill?

Run npx skillmds@latest add githubmofo/torusguard-report-2 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Torusguard Report safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Torusguard Report?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Torusguard Report free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Torusguard Report?

githubmofo (@githubmofo) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Torusguard Report by githubmofo — Agent Skill

Name: Torusguard Report
Author: githubmofo

File contents

TorusGuard Report — Posture Reporting & SARIF / HTML Export

Objective

Aggregate findings, verification traces, and recheck results into an auditable executive security report, export schema-compliant OASIS SARIF v2.1.0 logs for CI/CD pipelines, and render zero-dependency single-file visual HTML posture reports.

Two Execution Modes

Mode A: Automated CLI Execution

Run the report engine from your terminal:

# Generate visual dark-mode HTML dashboard
npx torusguard report --html

# Export OASIS SARIF v2.1.0 for GitHub Code Scanning / CI
npx torusguard report --sarif

# Generate both HTML and SARIF for latest run
npx torusguard report --html --sarif

# Generate report for a specific project directory
npx torusguard report ./examples/vulnerable-react-express --html

# Target a specific run ID
npx torusguard report --run run-20260910-121618-audit --html

Under the Hood:

Invokes python .torusguard/scripts/html_reporter.py to compile self-contained, offline-ready HTML reports with dynamic filtering, posture gauge, and cluster summaries at .torusguard/runs/<run_id>/report.html.
Invokes python .torusguard/scripts/sarif_exporter.py to produce OASIS SARIF v2.1.0 logs at .torusguard/runs/<run_id>/results.sarif.
Finalizes manifest.json metrics and updates historical posture scoring.
Displays 75-column terminal cards.

Mode B: In-Session AI Chat Agent Reporting

When generating security posture summaries in AI chat:

Aggregate Run Data: Inspect findings.json, remediation.md, and recheck.md from the active run.
Calculate Posture Score: Compute posture score ($0$–$100$) based on severity weighting (Critical: 25, High: 15, Medium: 5, Low: 2).
Format Executive Card: Present finding counts, closed vulnerabilities, remaining risks, and compliance posture.
Export Artifacts: Verify that report.html and results.sarif are serialized to disk.

SARIF v2.1.0 Specification

Schema: https://docs.oasis-open.org/sarif/sarif/v2.1.0/cos02/schemas/sarif-schema-2.1.0.json
Tool Driver: name: TorusGuard, semanticVersion: 1.3.3, full rules catalog in driver.rules.
Automation Details: automationDetails.id: "torusguard/static" to avoid collisions in multi-scanner CI/CD pipelines.
Fingerprints: partialFingerprints.primaryLocationLineHash with SHA-256 context hash.

Output Card Format

### 📊 TorusGuard Security Posture Report Emitted
- **Run ID:** `run-20260910-121618-audit`
- **Posture Score:** 85 / 100 (HIGH SECURITY)
- **Findings Summary:** 3 Evaluated · 2 Confirmed Fixed · 1 Unresolved
- **HTML Dashboard:** `.torusguard/runs/<run_id>/report.html` (View in browser)
- **SARIF v2.1.0 Export:** `.torusguard/runs/<run_id>/results.sarif` (Ready for CI)

---name: torusguard-report-2description: Generate executive posture reports, export OASIS SARIF v2.1.0 logs, and render dark-mode HTML dashboards via CLI or AI Agent.---# TorusGuard Report — Posture Reporting & SARIF / HTML Export## ObjectiveAggregate findings, verification traces, and recheck results into an auditable executive security report, export schema-compliant OASIS SARIF v2.1.0 logs for CI/CD pipelines, and render zero-dependency single-file visual HTML posture reports.---## Two Execution Modes### Mode A: Automated CLI ExecutionRun the report engine from your terminal:```bash# Generate visual dark-mode HTML dashboardnpx torusguard report --html# Export OASIS SARIF v2.1.0 for GitHub Code Scanning / CInpx torusguard report --sarif# Generate both HTML and SARIF for latest runnpx torusguard report --html --sarif# Generate report for a specific project directorynpx torusguard report ./examples/vulnerable-react-express --html# Target a specific run IDnpx torusguard report --run run-20260910-121618-audit --html```**Under the Hood:**- Invokes `python .torusguard/scripts/html_reporter.py` to compile self-contained, offline-ready HTML reports with dynamic filtering, posture gauge, and cluster summaries at `.torusguard/runs/<run_id>/report.html`.- Invokes `python .torusguard/scripts/sarif_exporter.py` to produce OASIS SARIF v2.1.0 logs at `.torusguard/runs/<run_id>/results.sarif`.- Finalizes `manifest.json` metrics and updates historical posture scoring.- Displays 75-column terminal cards.### Mode B: In-Session AI Chat Agent ReportingWhen generating security posture summaries in AI chat:1. **Aggregate Run Data:** Inspect `findings.json`, `remediation.md`, and `recheck.md` from the active run.2. **Calculate Posture Score:** Compute posture score ($0$–$100$) based on severity weighting (Critical: 25, High: 15, Medium: 5, Low: 2).3. **Format Executive Card:** Present finding counts, closed vulnerabilities, remaining risks, and compliance posture.4. **Export Artifacts:** Verify that `report.html` and `results.sarif` are serialized to disk.---## SARIF v2.1.0 Specification- **Schema:** `https://docs.oasis-open.org/sarif/sarif/v2.1.0/cos02/schemas/sarif-schema-2.1.0.json`- **Tool Driver:** `name: TorusGuard`, `semanticVersion: 1.3.3`, full rules catalog in `driver.rules`.- **Automation Details:** `automationDetails.id: "torusguard/static"` to avoid collisions in multi-scanner CI/CD pipelines.- **Fingerprints:** `partialFingerprints.primaryLocationLineHash` with SHA-256 context hash.---## Output Card Format```markdown### 📊 TorusGuard Security Posture Report Emitted- **Run ID:** `run-20260910-121618-audit`- **Posture Score:** 85 / 100 (HIGH SECURITY)- **Findings Summary:** 3 Evaluated · 2 Confirmed Fixed · 1 Unresolved- **HTML Dashboard:** `.torusguard/runs/<run_id>/report.html` (View in browser)- **SARIF v2.1.0 Export:** `.torusguard/runs/<run_id>/results.sarif` (Ready for CI)```

Frequently asked questions

Torusguard Report