# Generate Security Assessment Report

Generate a comprehensive security assessment report in markdown format, delivered directly in chat.

## Report Types

- **security_assessment** (default): Full CISO report with OWASP, SOC2, code evidences
- **executive_summary**: High-level GO/NO-GO decision for leadership
- **customer_dd**: Due diligence report for customers/partners

## Usage

- `/report` - Generate full security assessment (default)
- `/report executive` - Generate executive summary
- `/report customer` - Generate customer due diligence report

## Instructions

1. **Gather data** using MCP tools:
   - `get_gate_status(workflow_id)` - Production gate status
   - `get_findings(workflow_id)` - All findings
   - `get_recommendations(workflow_id)` - Remediation status

2. **Generate markdown report** with these sections:

```markdown
# Security Assessment: {workflow_id}

**Generated:** {date}
**Report Type:** {type}
**Risk Score:** {score}/100

---

## {✅|❌} Decision: {GO|NO-GO}

{Decision message based on gate status}

## Key Metrics

| Metric | Value |
|--------|-------|
| Risk Score | {score}/100 |
| Total Findings | {total} |
| Open Issues | {open} |
| Fixed | {fixed} |
| Blocking Issues | {blocking} |

## Blocking Issues ({count})

| ID | Severity | Title | Category |
|----|----------|-------|----------|
| REC-XXX | CRITICAL | [Title] | PROMPT |
...

## OWASP LLM Top 10 Coverage

| Control | Status | Details |
|---------|--------|---------|
| LLM01: Prompt Injection | ✅ PASS | No issues found |
| LLM02: Insecure Output | ❌ FAIL | 2 open issues |
| LLM03: Training Data | ✅ PASS | No issues found |
...

## SOC2 Compliance

| Control | Status | Details |
|---------|--------|---------|
| CC6.1: Logical Access | ✅ COMPLIANT | ... |
| CC7.2: System Monitoring | ✅ COMPLIANT | ... |
...

## Remediation Summary

- **Total Recommendations:** {total}
- **Pending:** {pending}
- **In Progress:** {fixing}
- **Fixed:** {fixed}
- **Verified:** {verified}

---

*Generated by Cylestio Agent Inspector*
```

3. **Return markdown directly** in response

## Example

**User:** `/report`

**Response:**
```markdown
# Security Assessment: my-sales-bot

**Generated:** December 21, 2024
**Risk Score:** 45/100

---

## ✅ Decision: GO

All critical and high severity issues have been addressed.
Your agent is ready for production deployment.

## Key Metrics

| Metric | Value |
|--------|-------|
| Risk Score | 45/100 |
| Total Findings | 12 |
| Open Issues | 3 |
| Fixed | 8 |
| Blocking Issues | 0 |

...

*Generated by Cylestio Agent Inspector*
```

View in dashboard: http://localhost:7100/agent-workflow/{id}/reports

