Skip to content
Security
Command

/report

Generate a professional penetration test report from all evidence files

From plugin
threatswarm
976 skills27 agents6 commands
> /plugin marketplace add mukul975/Threatswarm
> /plugin install threatswarm@threatswarm

Command definition

report.md
description: Generate a professional penetration test report from all evidence files
allowed-tools: Read, Write, Glob

Generate penetration test report named: $ARGUMENTS

1. **Setup**:

   ═══════════════════════════════════════════
   REPORT GENERATION
   Name:    $ARGUMENTS
   Output:  reports/$ARGUMENTS.md
   Source:  evidence/ directory
   ═══════════════════════════════════════════

Ensure `mkdir -p reports/` exists.

2. **Evidence Discovery**: Find all findings files:

  • Glob `evidence/**/*findings*.md`
  • Glob `evidence/**/*_report.md`
  • Glob `evidence/**/exploitation.md`
  • Glob `evidence/**/post_ex.md`
  • Glob `evidence/**/ad_findings.md`
  • Glob `evidence/**/web_findings.md`
  • Glob `evidence/**/api_findings.md`
  • Glob `evidence/**/network_findings.md`

3. **Invoke `report-writer` Agent**: Delegate with:

  • List of all evidence files found
  • Engagement name: $ARGUMENTS
  • Read scope.txt for scope section
  • Consolidate all findings into the full report template
  • Sort findings by CVSS score (critical first)
  • Deduplicate overlapping findings
  • Write to `reports/$ARGUMENTS.md`

4. **Quality Check**: After writing:

  • Count findings by severity
  • Verify all CRITICAL findings have CVSS vectors
  • Verify all findings have remediation steps
  • Check for any [PLACEHOLDER] text left unreplaced
  • Verify no plaintext credentials in report (search for common patterns)

5. **Print Report Summary**:

   ═══ REPORT COMPLETE ════════════════════════════
   File:       reports/$ARGUMENTS.md
   Word count: $(wc -w reports/$ARGUMENTS.md | awk '{print $1}')
   Pages est.: ~$(wc -w reports/$ARGUMENTS.md | awk '{print int($1/300)}')

   Findings by severity:
     Critical: $(grep -c "| CRITICAL |" reports/$ARGUMENTS.md || echo 0)
     High:     $(grep -c "| HIGH |" reports/$ARGUMENTS.md || echo 0)
     Medium:   $(grep -c "| MEDIUM |" reports/$ARGUMENTS.md || echo 0)
     Low:      $(grep -c "| LOW |" reports/$ARGUMENTS.md || echo 0)
     Info:     $(grep -c "| INFO |" reports/$ARGUMENTS.md || echo 0)

   Top recommendations:
   [print first 3 critical/high finding titles]

   Report ready: reports/$ARGUMENTS.md
   ════════════════════════════════════════════════

If no evidence files are found, output:

⚠ No findings files found in evidence/
Run /project:engage <target> first to collect evidence.
Read more
@mukul975
Ships withthreatswarm

27 scope-enforced AI agents that run the full pentest kill-chain (recon → exploit → post-ex → DFIR → report) as a one-command Claude Code plugin. Backed by 754 MITRE-mapped skills.

975 skills27 agents
Get the whole plugin

Stars on GitHub

Momentum

stars in total
97
Star history of mukul975/Threatswarm on GitHub, a chart by star-history.com

Other commands on threatswarm.

attack

attack

Command

Route an attack vector to the appropriate specialist agent — usage: /project:attack <target> <vector>

@mukul975@mukul975Install Command
engage

engage

Command

Start a new engagement for a target — verifies scope, creates evidence directories, and launches recon agent

@mukul975@mukul975Install Command
ir

ir

Command

Incident response workflow — triage, evidence collection, timeline, and IOC extraction

@mukul975@mukul975Install Command
pwned

pwned

Command

Post-exploitation workflow after getting shell access — privesc, credential harvest, lateral movement

@mukul975@mukul975Install Command

More commands from other plugins.

deslop-reborn

deslop-reborn

Command

One iteration of the IronClaw Reborn de-slop loop — take ONE Reborn crate, fan out parallel review sub-agents (thermo-nuclear…

ironclaw12d13k
@nearai@nearaiInstall Command
audit

audit

Command

Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…

@trailofbits@trailofbitsInstall Command
arsenal

arsenal

Command

Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…

@awarexone@awarexoneInstall Command