morodomimorodomi/dev-crew/skills/attack-report/SKILL.md

attack-report

Skill1 starsChanged 26 days agoMITView on GitHub

security-scan結果をMarkdownレポートに変換。脆弱性をCVSSスコア降順でソートし、Executive Summary・推奨事項を含むレポートを生成。「レポート生成」「attack report」「脆弱性レポート」「スキャン結果をまとめて」で起動。Do NOT use for スキャン実行（→ security-scan）やスキャン+レポート一括実行（→ security-audit）。

In this repository29 other files it gives its agents.
- AGENTS.mdAGENTS.md
- CLAUDE.mdCLAUDE.md
- carefulSkill
- codify-insightSkill
- commitSkill
- context-reviewSkill
- cycle-retrospectiveSkill
- diagnoseSkill
- evolveSkill
- flask-qualitySkill
- flutter-qualitySkill
- generate-e2eSkill
- greenSkill
- hugo-qualitySkill
- js-qualitySkill
- learnSkill
- onboardSkill
- orchestrateSkill
- php-qualitySkill
- python-qualitySkill
- redSkill
- refactorSkill
- reviewSkill
- security-auditSkill
- security-scanSkill
- skill-makerSkill
- specSkill
- sync-skillsSkill
- ts-qualitySkill

The file

Create a free account to mount

Files

SKILL.md

Attack Report

security-scan結果をMarkdownレポート形式で出力するスキル。

Usage

/attack-report              # 直前のsecurity-scan結果をレポート化
/attack-report ./report.md  # 指定ファイルに出力

Input Format

security-scan が出力するJSON形式を入力として受け取る。

{
  "metadata": {
    "scan_id": "<uuid>",
    "scanned_at": "<timestamp>",
    "target_directory": "<path>"
  },
  "recon": {
    "framework": "Laravel",
    "endpoints_count": 15,
    "high_priority_count": 5
  },
  "summary": {
    "total": 3,
    "critical": 0,
    "high": 2,
    "medium": 1,
    "low": 0
  },
  "vulnerabilities": [...]
}

Output Format

Markdown形式のレポートを生成。脆弱性はCVSSスコア降順でソート。

Report Sections

Section	Content
Executive Summary	リスク評価、優先対応Top 3、影響システム
Summary	スキャンメタデータ、脆弱性件数サマリ
Vulnerabilities	重大度別の脆弱性一覧 (Critical -> Low)
Recommendations	対応優先度に基づく推奨事項

Vulnerability Entry

各脆弱性は以下を含む:

ID, Type, CVSS 4.0 Score/Vector
File and line number
Agent, CWE/OWASP references
Description, Remediation

Reference

詳細・レポートテンプレート: reference.md

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

No reviews yet

People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.

It worked
Partly
It didn't

What did you use it for? e.g. Reviewing pull requests in a Rails app

Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

Check your setup, free