# Reporting Phase

> Reporting phase — generate structured pentest report from findings. Use when the current phase is REPORTING.

- Skill: `s0ld13rr/reporting-phase` (Agent Skill)
- Install (CLI): `npx skillmds@latest add s0ld13rr/reporting-phase`
- Raw SKILL.md: https://api.skillmd.com/api/skills/s0ld13rr/reporting-phase/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Docs & Writing
- Author: s0ld13rr (https://skillmd.com/u/s0ld13rr)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/s0ld13rr/reporting-phase

---


# Report Generation Guide

## Finding Format
Each finding should include:

```
### [SEVERITY] Finding Title
- **Target**: IP:port or URL
- **CVSS/Severity**: Critical/High/Medium/Low/Info
- **CVE**: CVE-XXXX-XXXXX (if applicable)
- **ATT&CK**: TXXXX (technique ID)
- **Status**: Confirmed / Exploited

**Description**: What the vulnerability is and why it matters.

**Evidence**: Command run + output proving the vulnerability.

**Impact**: What an attacker can achieve by exploiting this.

**Remediation**: Specific steps to fix the issue.
```

## Report Structure

### Executive Summary
- Engagement scope and dates
- Overall risk rating (Critical/High/Medium/Low)
- Key findings count by severity
- Top 3 most critical issues
- Strategic recommendations (2-3 sentences)

### Methodology
- Phases performed
- Tools used
- Scope boundaries

### Findings (grouped by severity)
1. Critical findings
2. High findings
3. Medium findings
4. Low findings
5. Informational

### Attack Path Narrative
Step-by-step description of successful attack chains:
- Initial access vector
- Privilege escalation path
- Lateral movement
- Data accessed

### Host Summary Table
| Host | OS | Services | Vulns | Access |
|------|----|----------|-------|--------|

### Recommendations
Prioritized remediation list:
1. Immediate (Critical/High) — fix within 48h
2. Short-term (Medium) — fix within 30 days
3. Long-term (Low/Info) — fix within 90 days

## Severity Classification
- **Critical (CVSS 9.0-10.0)**: RCE, auth bypass, default creds on critical systems, full DB dump
- **High (CVSS 7.0-8.9)**: Arbitrary file read/write, privesc, SSRF to internal, stored XSS on admin
- **Medium (CVSS 4.0-6.9)**: Reflected XSS, sensitive info disclosure, missing security headers with impact
- **Low (CVSS 0.1-3.9)**: Version disclosure, minor info leaks, missing non-critical headers
- **Info (CVSS 0.0)**: Open ports, technology detection, informational findings

## Output Formats
Use the `report_gen` tool to generate:
- Markdown report (default)
- JSON export (machine-readable)