Skip to content
Security
Command

/report

Generate a professional penetration test report from all evidence files

From plugin
threatswarm
786 skills27 agents6 commands
Install
> /plugin marketplace add mukul975/Threatswarm
> /plugin install threatswarm@threatswarm

How it fires

How this command gets triggered: by you, by Claude, or both.

  • Fires itselfClaude auto-loads it when your prompt matches the work.
  • You can call itInvoke it directly when you want it.
  • Slash command/report

Context preview

What this command does when you run it.

Generate a professional penetration test report from all evidence files

Command definition

report.md
description: Generate a professional penetration test report from all evidence files
allowed-tools: Read, Write, Glob

Generate penetration test report named: $ARGUMENTS

1. **Setup**:

   ═══════════════════════════════════════════
   REPORT GENERATION
   Name:    $ARGUMENTS
   Output:  reports/$ARGUMENTS.md
   Source:  evidence/ directory
   ═══════════════════════════════════════════

Ensure `mkdir -p reports/` exists.

2. **Evidence Discovery**: Find all findings files:

  • Glob `evidence/**/*findings*.md`
  • Glob `evidence/**/*_report.md`
  • Glob `evidence/**/exploitation.md`
  • Glob `evidence/**/post_ex.md`
  • Glob `evidence/**/ad_findings.md`
  • Glob `evidence/**/web_findings.md`
  • Glob `evidence/**/api_findings.md`
  • Glob `evidence/**/network_findings.md`

3. **Invoke `report-writer` Agent**: Delegate with:

  • List of all evidence files found
  • Engagement name: $ARGUMENTS
  • Read scope.txt for scope section
  • Consolidate all findings into the full report template
  • Sort findings by CVSS score (critical first)
  • Deduplicate overlapping findings
  • Write to `reports/$ARGUMENTS.md`

4. **Quality Check**: After writing:

  • Count findings by severity
  • Verify all CRITICAL findings have CVSS vectors
  • Verify all findings have remediation steps
  • Check for any [PLACEHOLDER] text left unreplaced
  • Verify no plaintext credentials in report (search for common patterns)

5. **Print Report Summary**:

   ═══ REPORT COMPLETE ════════════════════════════
   File:       reports/$ARGUMENTS.md
   Word count: $(wc -w reports/$ARGUMENTS.md | awk '{print $1}')
   Pages est.: ~$(wc -w reports/$ARGUMENTS.md | awk '{print int($1/300)}')

   Findings by severity:
     Critical: $(grep -c "| CRITICAL |" reports/$ARGUMENTS.md || echo 0)
     High:     $(grep -c "| HIGH |" reports/$ARGUMENTS.md || echo 0)
     Medium:   $(grep -c "| MEDIUM |" reports/$ARGUMENTS.md || echo 0)
     Low:      $(grep -c "| LOW |" reports/$ARGUMENTS.md || echo 0)
     Info:     $(grep -c "| INFO |" reports/$ARGUMENTS.md || echo 0)

   Top recommendations:
   [print first 3 critical/high finding titles]

   Report ready: reports/$ARGUMENTS.md
   ════════════════════════════════════════════════

If no evidence files are found, output:

⚠ No findings files found in evidence/
Run /project:engage <target> first to collect evidence.
Read more
Ships withthreatswarm

27 scope-enforced AI agents that run the full pentest kill-chain (recon → exploit → post-ex → DFIR → report) as a one-command Claude Code plugin. Backed by 754 MITRE-mapped skills.

Get the whole plugin

Other commands on threatswarm.