report-generator

Report Generator Skill

This skill takes findings from all diagnostic skills (core-integrity, config-security, user-audit, version-audit, malware-scan, code-quality) and compiles them into a single structured markdown report with a health grade, executive summary, and categorized findings. It handles archive rotation so previous reports are preserved.

Section 1: Input

Finding Format

Accept findings from all diagnostic skills as JSON arrays. Each finding object has these fields:

{
  "id": "SECR-CHECKSUMS-001",
  "severity": "Critical",
  "category": "Security",
  "title": "Modified core file detected",
  "summary": "A core WordPress file has been changed from its original version, which could indicate a security breach.",
  "detail": "wp-includes/version.php has been modified. Checksum mismatch detected via wp core verify-checksums. File size differs from expected: 2847 bytes vs 2340 bytes expected.",
  "location": "wp-includes/version.php",
  "fix": "Run `wp core download --force` to restore original core files, or manually compare the file to identify intentional customizations."
}

Required Fields

Field	Type	Description
id	string	Deterministic finding ID for cross-scan tracking
severity	string	One of: Critical, Warning, Info
category	string	One of: Security, Code Quality, Version & Compatibility, Suspicious Code
title	string	Short descriptive title
summary	string	One-sentence non-technical explanation
detail	string	Technical explanation with evidence
location	string	File path, file:line, or command reference
fix	string	Concrete remediation steps or code snippet

Category Sources

Each category maps to specific diagnostic skills:

• Security: Findings from diagnostic-core-integrity, diagnostic-config-security, diagnostic-user-audit
• Code Quality: Findings from diagnostic-code-quality
• Version & Compatibility: Findings from diagnostic-version-audit
• Suspicious Code: Findings from diagnostic-malware-scan