Pentest Report Writing
Write clear, accurate penetration test reports with CVSS scoring and executive summaries
- Repository
- SnailSploit/Claude-Red
- Stars
- 10,230
- Licence
- MIT
- Files
- 1 file
What it does
Once installed, the agent follows a structured methodology for writing penetration test and red team reports. It helps organize an executive summary for non-technical leaders, lay out each technical finding (severity, reproduction steps, impact, remediation, retest notes), score issues with CVSS v3.1 or v4.0 and justify each metric, and handle evidence like redacting credentials and time-stamping actions. It is guidance for writing documents, not a tool that tests systems.
Great for
- Security consultants preparing a client deliverable at the end of an engagement
- Teams standardizing a reusable pentest report template
- Students or junior testers learning how professional security reports are structured
Skip it if
- Actually finding or exploiting vulnerabilities, since the skill covers only reporting and includes no testing tools (it is not useful for that task)
- Writing reports for systems you are not authorized to assess, because the skill assumes a legitimate engagement and scope
Try asking
- “Restructure my draft pentest findings into an executive summary a CISO can read in 90 seconds”
- “Write a technical finding entry with CVSS 3.1 vector justification for this SQL injection”
- “Create a reusable report template for our consulting practice with scope and limitations sections”
- “Review my report for common mistakes like over-scoring or missing the business impact”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 1 original files, the MIT licence and an attribution note.
offensive-reporting.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip offensive-reporting.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip offensive-reporting.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Give the agent your raw notes and evidence list so it can build findings in the prescribed template rather than inventing details
- Ask for the executive summary last, after findings are scored, as the skill recommends
- Verify CVSS scores yourself against the official calculator, since the skill explains method but does not compute scores
What's inside
- SKILL.md
Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.