---
title: "Penetration Test Reporting - Professional Methodology - Air Market"
description: "The testing is done and now you have to write it up, which is the part nobody enjoys and clients judge you on. This covers how to structure the summary for people who are not technical, how to lay ou…"
canonical: "https://airmarket.ai/app/offensive-reporting"
---

[Air Market](/) / [Security](/category/security) / Penetration Test Reporting - Professional Methodology

Skill by [SnailSploit | Kai Aizen](/@snailsploit)

# Penetration Test Reporting - Professional Methodology

Turn a finished engagement into something the client can act on

## What this does

The testing is done and now you have to write it up, which is the part nobody enjoys and clients judge you on. This covers how to structure the summary for people who are not technical, how to lay out each finding, how to score it, how to handle evidence carefully, and the mistakes that make a report land badly.

### Top 3 things it does for you

- Write an executive summary a non-technical reader will follow
- Structure a finding so it can be reproduced and fixed
- Score severity and defend the vector you chose

## Information

**Penetration Test Reporting - Professional Methodology at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [SnailSploit \| Kai Aizen](/@snailsploit) |
| Category | [Security](/category/security) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Size | 14 KB |
| Licence | MIT |
| Repository | [SnailSploit/Claude-Red](https://github.com/SnailSploit/Claude-Red/tree/d03eb08f94d28695fdb83c209fa8c10b564ce758/Skills/utility/offensive-reporting) |
| GitHub stars | 2,956 (as of Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of Penetration Test Reporting - Professional Methodology and flagged nothing. AIR's verdict: **safe**.

**What Penetration Test Reporting - Professional Methodology's check was run against**

|  |  |
| --- | --- |
| Commit | d03eb08f94d28695fdb83c209fa8c10b564ce758 |
| Content hash | 48d501f347bc914556694971e8984b315739649867b9269d98520362f46dffa0 |
| Files read | [Browse the files at this exact commit](https://github.com/SnailSploit/Claude-Red/blob/d03eb08f94d28695fdb83c209fa8c10b564ce758/Skills/utility/offensive-reporting/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for Penetration Test Reporting - Professional Methodology](/security/offensive-reporting)

## About Penetration Test Reporting - Professional Methodology

A penetration test and red team report writing methodology. It covers executive summary structuring as a risk-led narrative for non-technical readers, and a technical finding format spanning title, severity, affected scope, narrative, reproduction steps, impact, remediation and references.

It covers scoring with CVSS v3.1 and v4.0 including vector justification, OWASP risk rating, evidence hygiene such as redacting credentials, hashing client data and time-stamping actions, screenshot and PoC artifact management, finding chain narratives, and documenting scope, limitations and assumptions. Retest evidence and remediation tracking are included, as are deliverable formats - PDF, DOCX, HTML, and JSON for SIEM ingestion - and keeping client and customer deliverables separate.

It also names the common mistakes: over-CVSSing, undermining the triager, and missing the so-what. Use it at the end of an engagement when authoring a deliverable, when restructuring a draft for executive readability, or when setting up a reusable template for a consulting practice.

## What's inside

- SKILL.md - instructions

## Questions

### Is Penetration Test Reporting - Professional Methodology safe to install?

AIR scanned this exact version of Penetration Test Reporting - Professional Methodology and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit d03eb08f94d2, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/offensive-reporting.

### How do I install Penetration Test Reporting - Professional Methodology?

Open https://airmarket.ai/app/offensive-reporting on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/SnailSploit/Claude-Red/tree/d03eb08f94d28695fdb83c209fa8c10b564ce758/Skills/utility/offensive-reporting. Install from that link, not the branch.

## Related on Air Market

- [More Security listings](/category/security)
- [Everything by SnailSploit | Kai Aizen](/@snailsploit)

---

Canonical URL: <https://airmarket.ai/app/offensive-reporting>