# pentestify-security-report-generator

A skill that turns pentest findings into a structured report: vulnerability tracking, live risk stats and PDF export.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 747 installs · ★ 12
- Author: reason-machines
- License: LicenseRef-Unknown · policy=link-only · description only; the file stays with the author
- Source: https://github.com/reason-machines/security-skills/tree/HEAD/skills/pentestify-security-report-generator/SKILL.md
- Updated: 2026-10-09
- HTML: https://affpapa.org/en/nevibecode/skills/pentestify-security-report-generator

## What it does

The skill keeps a running log of pentest findings and builds the client report from them. You add vulnerabilities by hand or from predefined templates, each with severity, CVSS score, description, impact, affected systems, evidence and remediation notes. Finding order in the report is set manually.

Under the hood it is a FastAPI app with a vanilla JavaScript frontend and SQLite storage. Reports and findings save automatically, and you can keep several reports at once. The interface runs in Spanish and English. PDF export goes through Playwright, so run `playwright install chromium` first — without it the export fails. The database file can be exported and imported for backup.

Docker with a data volume is the quickest way to get it running. A manual setup needs Python, a virtual environment and the packages in `requirements.txt`. The source includes examples for adding a custom vulnerability template, protecting endpoints with a token from an environment variable, and changing the PDF styling.

## Requirements
- Works with: Playwright

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill pentestify-security-report-generator -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/pentestify-security-report-generator/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/pentestify-security-report-generator/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill pentestify-security-report-generator -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/pentestify-security-report-generator/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill pentestify-security-report-generator -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/pentestify-security-report-generator/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install reason-machines/security-skills pentestify-security-report-generator
```

2. **Manually: put the files in place**
- File: `.github/skills/pentestify-security-report-generator/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill pentestify-security-report-generator -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/reason-machines/security-skills --path skills/pentestify-security-report-generator
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/pentestify-security-report-generator/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill pentestify-security-report-generator -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/reason-machines/security-skills/tree/HEAD/skills/pentestify-security-report-generator/SKILL.md

## When to use it
- pull scattered pentest findings into one client report
- assign severity and a CVSS score to each vulnerability
- export a formatted PDF from the collected findings
- back up the report database and move it to another machine
- run several reports side by side with autosave

## Example prompts
- create a pentest report for Acme Corp in English
- add a finding: SQL injection in the login form, severity critical
- export this pentest report as PDF

## Similar
- [security-testing](https://affpapa.org/en/nevibecode/skills/security-testing.md) — skill · 1100 installs
- [report](https://affpapa.org/en/nevibecode/skills/report.md) — skill · 1639 installs
- [build-review-interface](https://affpapa.org/en/nevibecode/skills/build-review-interface.md) — skill · 970 installs
- [fix-security-vulnerabilities-with-strix](https://affpapa.org/en/nevibecode/skills/fix-security-vulnerabilities-with-strix.md) — skill · 15700 installs
- [security-fuzzing](https://affpapa.org/en/nevibecode/skills/security-fuzzing.md) — skill · 583 installs
- [security-passwords](https://affpapa.org/en/nevibecode/skills/security-passwords.md) — skill · 547 installs

From the same set: [reason-machines/security-skills](https://affpapa.org/en/nevibecode/by/reason-machines/security-skills.md) — 17 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md