skill CX Codex

pentestify-security-report-generator — Claude Code skill: pentest

Q: How do I install pentestify-security-report-generator in Claude?

Run `npx skills add reason-machines/security-skills --skill pentestify-security-report-generator -a claude-code`. The skill lands in `~/.claude/skills/pentestify-security-report-generator/SKILL.md`.

A skill that turns pentest findings into a structured report: vulnerability tracking, live risk stats and PDF export.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓

npx skills add reason-machines/security-skills --skill pentestify-security-report-generator -a claude-code

Open on GitHub

What pentestify-security-report-generator does

The skill keeps a running log of pentest findings and builds the client report from them. You add vulnerabilities by hand or from predefined templates, each with severity, CVSS score, description, impact, affected systems, evidence and remediation notes. Finding order in the report is set manually.

Under the hood it is a FastAPI app with a vanilla JavaScript frontend and SQLite storage. Reports and findings save automatically, and you can keep several reports at once. The interface runs in Spanish and English. PDF export goes through Playwright, so run playwright install chromium first — without it the export fails. The database file can be exported and imported for backup.

Docker with a data volume is the quickest way to get it running. A manual setup needs Python, a virtual environment and the packages in requirements.txt. The source includes examples for adding a custom vulnerability template, protecting endpoints with a token from an environment variable, and changing the PDF styling.

What it helps with

pull scattered pentest findings into one client report
assign severity and a CVSS score to each vulnerability
export a formatted PDF from the collected findings
back up the report database and move it to another machine
run several reports side by side with autosave

Example prompts for the agent

create a pentest report for Acme Corp in English
add a finding: SQL injection in the login form, severity critical
export this pentest report as PDF

How to install pentestify-security-report-generator

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill pentestify-security-report-generator -a claude-code

2Manually: put the files in place

~/.claude/skills/pentestify-security-report-generator/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/pentestify-security-report-generator/

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill pentestify-security-report-generator -a codex

2Manually: put the files in place

.agents/skills/pentestify-security-report-generator/SKILL.md

For all projects use ~/.agents/skills/

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill pentestify-security-report-generator -a cursor

2Manually: put the files in place

.cursor/skills/pentestify-security-report-generator/SKILL.md

Cursor also reads .agents/skills/ and .claude/skills/

1GitHub CLI

gh skill install reason-machines/security-skills pentestify-security-report-generator

2Manually: put the files in place

.github/skills/pentestify-security-report-generator/SKILL.md

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill pentestify-security-report-generator -a gemini-cli

2Platform CLI

gemini skills install https://github.com/reason-machines/security-skills --path skills/pentestify-security-report-generator

Manually: put the files in place

.devin/skills/pentestify-security-report-generator/SKILL.md

The legacy .windsurf/skills/ path still works

Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill pentestify-security-report-generator -a opencode

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about pentestify-security-report-generator

How do I install pentestify-security-report-generator in Claude?

Run npx skills add reason-machines/security-skills --skill pentestify-security-report-generator -a claude-code. The skill lands in ~/.claude/skills/pentestify-security-report-generator/SKILL.md.

What does pentestify-security-report-generator do?

It tracks pentest vulnerabilities from templates or manual entry, shows live risk statistics and exports a structured PDF report. Data lives in SQLite, and the UI works in Spanish and English.

What does the skill need to run?

A FastAPI backend with a JavaScript frontend and a SQLite database. PDF export needs Chromium for Playwright, installed with playwright install chromium.

Similar skills

Everything for Security →

security-testing kindlmann Runs negative-path security checks in CI: ZAP, Semgrep, dependency scanning and tests for XSS, SSRF, auth bypass. CX Codex +1 1,100installs report Alireza Rezvani Turns a Playwright run into a readable report: pass, fail, flaky, error messages and duration. Sends it to Slack, TestRail or a markdown file, depending on what the project already uses. 1,639installs build-review-interface ai-evals-course Builds a custom browser-based annotation interface to review LLM traces and record human feedback. Useful when evaluating models and collecting labeled datasets. CX Codex +1 970installs fix-security-vulnerabilities-with-strix usestrix This skill triages validated Strix findings, fixes their root causes, and runs Strix again to verify the result. Use it after a CLI or cloud scan. CX Codex +1 15,700installs security-fuzzing Eyadkelleh Provides curated SecLists fuzzing payloads for injection testing and input validation. Essential for authorized code audits, bug bounties, and CTFs. CX Codex +1 583installs security-passwords Eyadkelleh This skill adds curated password wordlists from SecLists to your agent for authorized login audits and credential testing. CX Codex +1 547installs

From the same set17

malware-warning-bitdefender-crack Flags repositories that disguise malware as cracked Bitdefender software and helps explain the signals behind the threat. CX Codex +1 971installs malware-detection-and-removal A skill for spotting repositories that pose as cracked software and deciding what to do about them. CX Codex +1 952installs npm-security-best-practices Guides npm dependency hardening, supply-chain attack prevention, and safer package-manager settings. Useful when reviewing Node.js installs. CX Codex +1 919installs malware-repository-warning The skill triggers when someone asks for help with a crack, keygen or pre-activated antivirus, and answers with a warning instead of setup steps. CX Codex +1 851installs edgesecurityaccess-wireguard-vpn This skill walks the agent through standing up a WireGuard VPN: build the Go server, add users, and hand out configs over an HTTP API. CX Codex +1 788installs sparkfinderoven-security-compliance-skills A suite of commands and workflows for security and compliance work: OWASP scanning, CVE detection, GDPR audits, SOC 2 readiness, threat modeling. CX Codex +1 759installs sparkfinderoven-r01-security-compliance-skills A skill suite that scans code for OWASP vulnerabilities, checks dependencies for CVEs, audits GDPR and SOC 2 readiness, and builds STRIDE threat models. CX Codex +1 729installs esaa-security-audit This skill runs 95 checks across 16 security domains and records every finding as an immutable event, so the same repo state yields the same report. CX Codex +1 717installs