/report

description: Generate a formatted vulnerability report from engagement findings
allowed-tools: ToolSearch, Bash, Read, Write, Glob, Grep
argument-hint:

> **Storage Policy**: ALL output files MUST be saved in the project directory. NEVER write to `/tmp/` or any system temporary directory.

Generate Vulnerability Report

Generate a comprehensive penetration test report from findings in the current engagement.

Step 1: Load Tools

Use ToolSearch to load:

• `create_vulnerability_report` — formatted vulnerability report generation
• `create_scan_summary` — scan result summarization

Step 2: Gather Findings

Read all reconnaissance and scan output files in the project directory:

• Use Glob to find `*.md` files in the current directory and subdirectories
• Look for ATTACK-VECTORS.md, VULNERABILITY-REPORT.md, or similar
• Read scan outputs (webscan-*, apiscan-*, portscan-*, etc.)
• Check `reports/` subdirectory for detailed findings

Step 3: Scan Summary

Run `create_scan_summary` to generate a consolidated summary of all tool outputs from this engagement.

Step 4: Vulnerability Report

Run `create_vulnerability_report` with all discovered vulnerabilities, organized by:

• CVSS severity (Critical → Info)
• Vulnerability type (injection, auth, config, etc.)
• Each finding should include:
• Title and description
• Affected endpoint/component
• Steps to reproduce
• Evidence/proof
• Impact assessment
• Remediation recommendation

Step 5: Output

Save the report to `PENTEST-REPORT-{date}.md` in the project directory.

Include:

• Executive summary
• Scope and methodology
• Findings by severity
• Risk matrix
• Remediation priority list