redteam-report-template

Generates client-facing red-team engagement reports in a six-section finding format with DOCX export.

Updated May 29, 2026
One-click install
npx skills add https://github.com/hhjkjkjk/Claude-skills --skill redteam-report-template-hhjkjkjk
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: redteam-report-template
Source: https://github.com/hhjkjkjk/Claude-skills/tree/main/skills/redteam-report-template
Command: npx skills add https://github.com/hhjkjkjk/Claude-skills --skill redteam-report-template-hhjkjkjk

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Writing a professional red-team deliverable for an enterprise client is slow and error-prone: findings need consistent structure, calibrated severity, business-translated impact, reproducible PoCs, and polished DOCX output. This Skill codifies the complete Subject / Observations / Description / Impact / Recommendation / PoC format so every finding ships client-ready. ## Core Features & Use Cases - Six-section finding format: Enforces Subject, Observations, Description, Impact, Recommendation, and PoC per finding, with severity and red-team-specific status fields like "Confirmed; patched mid-engagement". - Full document structure: Provides the executive summary, risk summary table, recon appendix, IoC section, and cleanup statement expected in enterprise deliverables. - DOCX pipeline: Converts markdown reports to DOCX via pandoc with embedded screenshots, a reference style template, and image-count verification. - Use Case: After a one-week external red-team engagement with 14 validated findings, use this Skill to package them into a severity-ordered markdown report with embedded screenshots, then render a styled DOCX for the client's CISO. ## Quick Start Use the redteam-report-template skill to package my validated engagement findings into a client-facing red-team report and export it as DOCX.

Frequently Asked Questions about redteam-report-template

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I write a red-team report for an enterprise client?▼

Structure each finding with six sections: Subject, Observations, Description, Impact, Recommendation, and PoC. Order findings by severity, add an executive summary and risk table, then convert the markdown to DOCX with pandoc using a reference style template.

What is the difference between a red-team report and a bug-bounty report?▼

Red-team reports target CISOs and mixed technical audiences with business-framed impact, status fields like patched-mid-engagement, and recon appendices. Bug-bounty reports target triagers with one finding per submission and platform-specific severity scoring.

How do I convert a markdown pentest report to DOCX with images?▼

Run pandoc on the markdown file with a reference-doc style template, set the resource path to your screenshot folder, and enable a table of contents. Verify the result by counting embedded images in the DOCX with python-docx.

When should I not use this red-team report template?▼

Do not use it for bug-bounty platform submissions on HackerOne, Bugcrowd, or Intigriti, quick proof-of-concept memos, or internal team writeups. Those audiences need different formats, tone, and severity conventions.

How should I handle a finding that stopped reproducing during the engagement?▼

Mark it as Confirmed; patched mid-engagement with timestamps showing when it broke, and keep the pre-patch PoC as evidence. A confirmed finding that stops working almost always indicates a client patch, not a false positive.