report-template SKILL.md skillA

report-template from ap6pack/outrider-recon is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add ap6pack/outrider-recon/report-template@git:20260727.8ead88e

Pins git:20260727.8ead88e in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
ap6pack/outrider-recon
Path
skills/report-template/SKILL.md
Versions recorded
5
Latest version
git:20260727.8ead88e, committed Jul 27, 2026
First version recorded
May 29, 2026
Size
5,971 bytes
Repository stars
15
License
a license file GitHub does not identify

Autonomous report generation from collected findings. Produces bug bounty submissions, client deliverables, and vulnerability reports using the standard finding schema.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Report Template

> Sub-skill of `offensive-osint`. Load `osint-methodology` for pipeline and deliverable context.
> Authorized targets only.

---

## BEHAVIORAL CONTRACT

**When triggered:** Report generation, bug bounty submission, vulnerability write-up, or client deliverable creation is needed.

**Execute:**

1. Collect all findings from the current engagement — pull from sidecar JSON files if available (`analysis-and-reporting` §6).
2. For bug bounty submissions: populate the Bug Bounty Report Template (§1) for each finding.
3. For client deliverables: populate the Client Report Template (§2) covering all findings.
4. Auto-fill severity, confidence, and attack-path hints from `analysis-and-reporting` §4 and §3.
5. Include reproduction steps with evidence (URL + UTC timestamp + SHA-256).
6. Apply risk translation for executive audience (see `osint-methodology` §14).

**Output:** Completed report per §1 or §2 template, ready for submission or delivery.

**Severity rules:** Use severity from the finding schema. Include CVSS v3 vector + score for bug bounty.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add ap6pack/outrider-recon/report-template@sha256:ec72d2e22e1ab258

The line at the top of this page pins the label git:20260727.8ead88e, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_3go6ofo2dyyvdozf.svg)](https://markdownregistry.com/a/art_3go6ofo2dyyvdozf)

6 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 5 versions of this file, between May 29, 2026 and Jul 27, 2026, about one every 15 days.

versioncommittedcommitsizeaudit
git:20260727.8ead88e latest2026-07-27 8ead88e 5,971 BA view · diff
v1.0.02026-07-13 c932524 5,959 BA view · diff
v1.0.02026-07-12 69cbe86 5,583 BA view · diff
v1.0.02026-07-12 4a2b324 4,789 BA view · diff
v1.0.02026-05-29 cc6a89a 4,779 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (5971 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

ap6pack/outrider-recon · 15 stars · license a license file GitHub does not identify · pushed 2026-09-12 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_3go6ofo2dyyvdozf
GET https://markdownregistry.com/api/v1/resolve?ref=ap6pack/outrider-recon/report-template
GET https://markdownregistry.com/api/v1/blob/ec72d2e22e1ab2580c38f7aadc173f3237d467dfec2c0ae5f76e9e753596d5b9

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from ap6pack/outrider-recon

analysis-and-reporting SKILL.md skill
ap6pack/outrider-recon · skills/analysis-and-reporting/SKILL.md · Endpoint interest scoring, mobile app ownership confidence, attack-path hint patterns, a severity decision matrix…
git:20260912.654f0da · audit A · 15 stars
cloud-and-infra SKILL.md skill
ap6pack/outrider-recon · skills/cloud-and-infra/SKILL.md · Cloud-native service fingerprints, Kubernetes/container exposure, CI/CD platform exposure, TLS deep audit, and favicon…
git:20260727.8ead88e · audit A · 15 stars
identity-fabric SKILL.md skill
ap6pack/outrider-recon · skills/identity-fabric/SKILL.md · Concrete endpoints, probes, and enumeration techniques for identity provider fingerprinting and auth surface mapping…
git:20260910.b1409eb · audit A · 15 stars
offensive-osint SKILL.md skill
ap6pack/outrider-recon · skills/offensive-osint/SKILL.md · Router for the Offensive OSINT arsenal. Dispatches to focused sub-skills by task type. Covers the full external…
git:20260727.8ead88e · audit A · 15 stars
osint-methodology SKILL.md skill
ap6pack/outrider-recon · skills/osint-methodology/SKILL.md · Comprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments. Covers the…
git:20260912.654f0da · audit A · 15 stars
people-breach-intel SKILL.md skill
ap6pack/outrider-recon · skills/people-breach-intel/SKILL.md · Breach data lookup, HudsonRock infostealer intel, email-pattern inference, email harvest, Slack/Discord discovery…
git:20260727.8ead88e · audit A · 15 stars
post-discovery SKILL.md skill
ap6pack/outrider-recon · skills/post-discovery/SKILL.md · Post-credential enumeration workflows for validated live keys — AWS IAM enum, GitHub PAT scope/repo enum, Slack…
git:20260727.8ead88e · audit A · 15 stars
recon-asset-discovery SKILL.md skill
ap6pack/outrider-recon · skills/recon-asset-discovery/SKILL.md · Subdomain enumeration, CT logs, DNS record catalog, WHOIS/RDAP, and passive reconnaissance for authorized external…
git:20260727.8ead88e · audit A · 15 stars
secrets-and-dorks SKILL.md skill
ap6pack/outrider-recon · skills/secrets-and-dorks/SKILL.md · Secret regex catalog, dork corpus, GitHub code-search dorks, and read-only credential validators for authorized secret…
git:20260912.654f0da · audit A · 15 stars
web-surface SKILL.md skill
ap6pack/outrider-recon · skills/web-surface/SKILL.md · Probe paths, endpoint scoring, email security analysis, vendor fingerprints, documentation leak hunting, and API…
git:20260727.8ead88e · audit B · 15 stars

Every file in ap6pack/outrider-recon

Browse by kind, by grade A, or by owner.