pentest-report

What this skill does

Guides the structured writing of a professional penetration test report covering executive summary, scoped findings with CVSS v3.1 scoring, attack narrative, strategic recommendations, and quality assurance. No external tools required — this is a methodology skill for report authoring.

When to use

• Documenting the results of a completed penetration test engagement
• Producing deliverables for clients, internal security teams, or compliance reviewers
• Standardizing finding format across engagements (CVSS, CWE, OWASP mapping)
• Creating executive-level summaries from raw technical findings

Prerequisites

• Completed assessment data: findings list, evidence (screenshots, logs, PoC), scope document, Rules of Engagement (RoE)
• CVSS v3.1 calculator: https://www.first.org/cvss/calculator/3.1
• CWE reference: https://cwe.mitre.org/
• OWASP Top 10 / Testing Guide: https://owasp.org/www-project-top-ten/
• Word processor or Markdown editor capable of exporting to PDF