# Security Report

> Generate a comprehensive security report with executive summary, detailed findings, remediation roadmap, and compliance mapping. Supports markdown and HTML output.

- Skill: `jiayaoqijia/security-report` (Agent Skill)
- Install (CLI): `npx skillmds@latest add jiayaoqijia/security-report`
- Raw SKILL.md: https://api.skillmd.com/api/skills/jiayaoqijia/security-report/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Product & Planning
- Author: jiayaoqijia (https://skillmd.com/u/jiayaoqijia)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/jiayaoqijia/security-report

---


# Security Report Skill

## Overview

Generate a comprehensive security assessment report from scan results.

## Inputs

- Scan results (from /scan skill)
- Fix results (from /fix skill, if available)
- Report format: "markdown" (default), "html", or "json"

## Report Sections

### 1. Executive Summary
- Overall security health score (0-100)
- Critical/High finding count
- Top 3 risks with business impact
- Remediation cost estimate (LOC)

### 2. Findings Detail
For each finding:
- Severity badge and OWASP/CWE mapping
- Affected file and line number
- Description of vulnerability
- Proof of concept (how it could be exploited)
- Recommended fix
- Fix status (available/pending/applied)

### 3. Before/After Comparison (if fixes applied)
- Side-by-side diff of vulnerable vs fixed code
- Verification that scanner no longer flags the issue

### 4. Compliance Mapping
- OWASP Top 10 coverage matrix
- OWASP LLM Top 10 coverage (for agent code)
- CWE mapping for each finding

### 5. Remediation Roadmap
- Priority-ordered fix plan
- Estimated effort per fix (LOC)
- Total remediation cost
- Quick wins vs deep fixes

### 6. Dependency Health
- Vulnerable packages list
- Upgrade recommendations
- License compliance issues

## Output

- Markdown report file
- Optional HTML with embedded charts
- Print-ready format for stakeholder distribution

## Guardrails

- Never include actual secrets or credentials in reports
- Redact sensitive file paths if requested
- Include scanner version and rule set for reproducibility