pentest-report
Write a clear penetration-test report from findings of an authorized engagement. Use when documenting a pentest, security assessment, or authorized red-team engagement — turning findings into a report clients act on. Produces an executive summary, scope & methodology, findings with severity/evidence/reproduction/remediation, and a risk-ranked remediation plan. For authorized testing only.
npx skills add mohitagw15856/pm-claude-skills --skill pentest-report --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Penetration Test Report Skill A pentest is only as valuable as the report — findings that aren't clearly explained, evidenced, and prioritized don't get fixed. This skill turns the findings of an **authorized** engagement into a report that both executives and engineers can act on: risk up top, reproducible technical detail below, remediation throughout. > For **authorized** security testing only (signed scope / rules of engagement). This documents results; it is > not a guide to attacking systems you don't have written permission to test. ## Required Inputs Ask for these only if they aren't already provided: - **Engagement scope** — what was in scope (targets, environments), the authorization/rules of engagement, and the testing window. - **Methodology** — approach (black/grey/white-box), standards followed (e.g. OWASP, PTES), tools. - **Findings** — each issue found: what it is, affected asset, how it was exploited, evidence, and impact. - **Audience** — client's technical team, leadership, or both. ## Output Format ### Penetration Test Report: [client / engagement] **1. Executive summary** — for leadership: the overall risk posture, the count of findings by severity, the 2–3 m
- Required Inputs
- Output Format
- Penetration Test Report: [client / engagement]
- Quality Checks
- Anti-Patterns
- Based On
What does the pentest-report skill do?
Write a clear penetration-test report from findings of an authorized engagement. Use when documenting a pentest, security assessment, or authorized red-team engagement — turning findings into a report clients act on. Produces an executive summary, scope & methodology, findings with severity/evidence/reproduction/remediation, and a risk-ranked remediation plan. For authorized testing only.
How do I install it?
Run `npx skills add mohitagw15856/pm-claude-skills --skill pentest-report --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From mohitagw15856/pm-claude-skills, a repository with 1,255 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.