Agent skill · data analytics · jeremylongshore
generating-executive-summary
Compose an exec-readable summary from a unified findings JSONL plus the OWASP coverage report. Computes a single engagement risk score (0-100, severity-weighted with OWASP-breadth and governance terms), rolls up findings into headline counts, names the top-3 remediation priorities with effort + impact estimates, and produces a 1-2 page markdown document for a C-level or board audience. Elides technical detail; the vulnerability report is the deep document. Use when: closing an engagement, preparing the exec-readout meeting, packaging for board review, or producing a one-page narrative for auditor / insurer / board. Threshold: input findings missing produces CRITICAL operational finding; otherwise the deliverable is the document itself. Trigger with: "generate exec summary", "executive summary", "C-level readout", "board pentest summary".
Why this skill is useful
Generates a comprehensive executive summary with a risk score and remediation priorities from specific input data, which the AI wouldn't reliably create on its own.
What it needs
About 5k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Generating Executive Summary Overview The vulnerability report is comprehensive — every finding, full detail, every reference. The C-level reader doesn't open it. They ask their security lead "what should I tell the board?" The security lead needs a one-page answer. That one-page answer is the executive summary. It states the engagement's bottom line: A single risk score (0-100) Headline counts by severity Top-3 remediation priorities, each with rough effort + impact OWASP Top 10 coverage (where the work landed) Engagement scope and authorization summary (what was tested, under what authority, in what window) Next steps the customer's organization should take The summary doesn't omit anything important; it just compresses. The vulnerability report remains the deep artifact for anyone who needs the technical detail. This skill consumes the enriched findings JSONL (after OWASP mapping) + the OWASP coverage report + the ROE, computes the risk score, picks the top remediation priorities deterministically, and renders the document. When the skill produces findings Finding Severity Threshold Affected control --- --- --- --- Input findings file missing CRITICAL Source JSONL doesn't exist (operational) OWASP coverage report missing HIGH Coverage referenced but not present (operational) ROE missing MEDIUM Can still generate summary but lacks scope/authz context (operational) Exec summary written cleanly INFO Confirmation (informational) Risk score >75 (high engagement risk) HIGH Computed risk score elevated (advisory) Risk score >90 (critical engagement risk) CRITICAL Engagement exposed material risk; needs urgent action (advisory) Risk score (0-100) composition The single risk score is the headline number on the exec summary. The composition is deterministic and documented: The first five terms weight by severity. The OWASP-coverage term adds 5 points per category beyond 5 (a broader-finding engagement implies broader risk surface). …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/generating-executive-summary--d9387e