fable-5-report

Compiles red team campaign phase data into an evidence-based assessment report.

Updated Jun 15, 2026
One-click install
npx skills add https://github.com/HazaVVIP/Fable5 --skill fable-5-report-hazavvip
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: fable-5-report
Source: https://github.com/HazaVVIP/Fable5/tree/main/.claude/skills/fable-5/skill-report
Command: npx skills add https://github.com/HazaVVIP/Fable5 --skill fable-5-report-hazavvip

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) components.

What problem does it solve? After a multi-phase red team engagement, findings, evidence, and credentials are scattered across per-phase state files and summaries. This Skill consolidates all campaign data into a single structured report with verified evidence chains, severity ratings, and prioritized remediation recommendations. ## Core Features & Use Cases - Campaign Data Compilation: Reads state.json and summary.md from every executed phase (reconnaissance through defense evasion) and maps findings to the full attack chain. - Evidence Chain Verification: Cross-references each finding against raw tool output, removes unsubstantiated claims, and enforces an evidence-or-removal standard. - Structured Report Generation: Populates a standardized template covering executive summary, attack surface, exploitation chain, findings with CVSS/CWE, credentials obtained, data accessed, and prioritized remediation. - Use Case: After completing an authorized assessment against a target, invoke this Skill to produce campaigns/{target}/REPORT.md documenting the complete attack path with actionable fixes prioritized Critical through Low. ## Quick Start Generate the final campaign report for the current target by compiling all completed phase data into REPORT.md.

Frequently Asked Questions about fable-5-report

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a red team engagement report from campaign data?▼

Read the master campaign state.json, then compile state.json and summary.md from each executed phase. Cross-reference findings against raw evidence, populate the report template, and save the result to campaigns/{target}/REPORT.md.

What sections should a penetration testing report include?▼

This template includes an executive summary with risk rating, attack surface inventory, exploitation chain, findings with CVSS/CWE and raw evidence, credentials obtained, data accessed, and remediation recommendations prioritized by severity.

How are findings verified before inclusion in the report?▼

Every finding must have supporting evidence such as tool output, logs, or RCE confirmation like uid= output. Claims without substantiating evidence are removed before the report is finalized.

How are remediation recommendations prioritized in the report?▼

Recommendations are grouped into Critical (immediate), High (30 days), Medium (90 days), and Low (180 days) tiers. Each includes the issue, specific fix steps, and references to standards like CIS, NIST, and OWASP.

What input files does the report compilation require?▼

It requires the campaign state.json plus state.json and summary.md from each completed phase, along with supporting artifacts like subdomains.json, fingerprint.json, and credentials.json stored under campaigns/{target}/.