MCP App StoreMCP App Store
from skills13
Generate a styled, client-ready PDF penetration test report from findings.json using a defined dark theme and structured sections (exec summary, risk dashboard,
This skill generates a professional penetration test report PDF from a findings.json input. It automates assembly of an executive summary, severity stat boxes, a risk dashboard, per-finding cards with business impact, remediation guidance, and an overall remediation table — producing a branded, dark-themed PDF suitable for client delivery.
Use this skill at the end of a pentest engagement when you have a machine-readable list of findings (findings.json). It's intended for automating report production during test pipelines or as a convenience for security teams preparing consistent client deliverables.
report_generator.py) that consumes findings.json and uses weasyprint to render PDF.refs/style.md defines the CSS and visual identity; the skill prescribes logo paths and file naming conventions.Compatible with agents that can read/write files and execute Python (weasyprint) — typical CLI-capable agents and CI runners.
Pentest report generator skill by NullPointer Studio that reads findings.json and produces a styled dark-themed PDF report via a dynamically-generated Python script using weasyprint. No bundled scripts to test — the SKILL.md instructs the agent to write the generator script on the fly. Well-documented workflow with clear steps for deduplication, classification, and report population. References a local style guide in refs/style.md. Hardcoded absolute path to a specific user's Desktop directory for the logo file is a minor privacy concern and will break on other systems.
No scripts to execute — static analysis only. The skill is well-written with clear instructions and good structure. The hardcoded absolute path is a portability issue and minor privacy leak but not a security threat. Skill is niche (pentest reporting) and tightly coupled to NullPointer Studio's branding and theme, limiting broad appeal.
Request CVEs
Generate CVE request packages and disclosure artifacts (MITRE form data, GitHub advisory draft, full vulnerability report, and vendor notification templates) fr
TLS/SSL Configuration Audit
Professional cryptographic security audit of TLS/SSL configurations, mapped to PCI DSS 4.0, NIST, and FedRAMP compliance.
Reverse Shell & Listener Management
Expert penetration testing skill for generating platform-specific reverse shell payloads and managing listeners in Kali Linux.
Development Worktree
Create an isolated git worktree for feature work, auto-run project setup, and verify a clean test baseline before development.
Readwise Reader Document Management
Manage Readwise Reader documents: list, save, search, move, tag, highlight, export and bulk-edit via official and custom CLIs.
Bounty Hunter — Atlas
Persona skill: 'Atlas' — a profit-focused developer persona for discovering, evaluating and executing paid bounties or freelance tasks with ROI-aware workflows.
Junshi — Research Advisor
Daily strategic research advisor that scans arXiv/venues, digests papers, and proposes bold, ranked research ideas tailored to the user's profile.
Malware Analysis Report Writer
Structures actionable malware analysis reports with executive summaries, IOCs, and MITRE ATT&CK mapping for technical and leadership audiences.
TradeOS
Natural-language driven CEX trading and portfolio management for agents: API key vaulting, multi-exchange orders, DCA, arbitrage scanning, alerts and security r
Full Stack Builder
End-to-end builder that scaffolds, implements, tests, and optionally deploys web and API applications from a natural-language specification.
ezBookkeeping API Tools
Command-line API tools for ezBookkeeping: record and query transactions, retrieve accounts/categories/tags, and fetch exchange rates for self-hosted personal fi