skills.rest
torikhayes
torikhayesCOMMUNITY
Explore all skills by this author →
GitHub

security-report

Regenerates and displays the consolidated security-review findings report across code, dependency, and adversarial reviews.

Updated Jul 13, 2026
Search Tags:#code review#vulnerability#consolidation#security report#cve#findings#adversarial review
One-click install
npx skills add https://github.com/torikhayes/aeai-dotnet-brownfield --skill security-report-torikhayes
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-report
Source: https://github.com/torikhayes/aeai-dotnet-brownfield/tree/main/.claude/skills/security-report
Command: npx skills add https://github.com/torikhayes/aeai-dotnet-brownfield --skill security-report-torikhayes

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Security findings from code review, dependency/CVE scanning, and adversarial review are scattered across separate outputs, making it hard to see the overall risk picture. This Skill regenerates and displays one consolidated, prioritized findings report so maintainers get full visibility in a single view. ## Core Features & Use Cases - Consolidated Reporting: Runs a render script that merges findings from all three review capabilities (code, dependency/CVE, adversarial) into a single prioritized report. - Severity Highlighting: Explicitly calls out any critical-severity findings at the top of the response so they are never missed. - Honest Empty-State Handling: Clearly states when zero findings exist or when some review capabilities simply have not been run yet, avoiding misleading conclusions. - Use Case: After running security reviews on a repository, invoke this Skill to regenerate specs/008-adversarial-security-review/findings/report.md and immediately see all findings prioritized together. ## Quick Start Ask the assistant to show the consolidated security report to regenerate and view all current security findings.

Frequently Asked Questions about security-report

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a consolidated security findings report?▼

Invoke the security-report command, which runs the security-report-render.sh script against the findings directory and regenerates report.md. The regenerated report is then displayed in full so you can see all findings prioritized together.

What security review types are included in the findings report?▼

The report consolidates three review capabilities: code review, dependency/CVE scanning, and adversarial security review. Findings from all three are merged and prioritized together in a single report.

What happens if the security report shows zero findings?▼

A zero-findings report is stated explicitly and is not treated as an error. This is expected the first time any of the three review capabilities runs, and the report still confirms the review state.

Why does the report only show findings from one or two review types?▼

That means the other review capabilities have not been run yet, not that they found nothing. The report only reflects capabilities that have produced findings, and missing ones are reported as not yet executed.

How are critical severity findings handled in the report?▼

Any finding with critical severity is called out explicitly at the top of the response before the full report. This ensures maintainers see the most severe issues without scanning the entire document.

Related Skills

Explore More Software Engineering Skills→
liminal-ailiminal-ai

review-synthesis

Consolidate multi-pass code review findings into a verified single report.

Official
Advanced
CarbonTailsCarbonTails

triage

Automates the categorization of issues and pull requests and generates agent briefs.

Official
Intermediate
josavicentevwjosavicentevw
1

devsecops

Automate security scanning and governance across CI/CD pipelines and compliance workflows.

Community
Advanced
GDSDNGDSDN
3

security-scan

Scan npm dependencies, ESLint code patterns, and exposed secrets for security reports.

Community
Advanced