report
Output file path (default: stdout)
0K-Talon Security Report Generator
Generate a comprehensive security assessment report for the current project.
Arguments
-
format: Report output formatmarkdown- Markdown report (default)json- Machine-readable JSONhtml- Styled HTML report
-
output: Where to save the report- File path to save report
- Default: Display in conversation
Report Contents
1. Executive Summary
- Project name and scan timestamp
- Overall security posture (SECURE, AT_RISK, CRITICAL)
- Key findings count by severity
- Top 3 recommendations
2. Defense Layer Status
| Layer | Status | Events (24h) | Last Triggered |
|---|---|---|---|
| L0 | ✅ Active | 5 | 2 hours ago |
| L1 | ✅ Active | 12 | 30 min ago |
| ... | ... | ... | ... |
3. Framework Coverage Analysis
OWASP LLM Top 10 2025:
- LLM01 Prompt Injection: ✅ Covered (L4, L19)
- LLM02 Sensitive Info: ✅ Covered (L0, L1, L9)
- LLM03 Supply Chain: ✅ Covered (L14)
- ...
MITRE ATLAS:
- AML.T0048 Prompt Injection: ✅ 8 rules
- AML.T0051 LLM Prompt Injection: ✅ 2 rules
- AML.T0051 Data Leakage: ✅ 4 rules
- ...
4. Detailed Findings
For each finding:
- Severity and layer
- File location and line number
- Pattern matched
- Code snippet
- Remediation steps
- OWASP/ATLAS mapping
5. Trend Analysis
- Events over time (7 days)
- Most triggered patterns
- Attack vector distribution
6. Recommendations
Prioritized list of security improvements:
- [CRITICAL] Address hardcoded API key in config.ts
- [HIGH] Enable L9 egress scanning for API routes
- [MEDIUM] Add input validation to user handlers
Execution
When user runs /0k-talon:report:
-
Collect Data
- Read event logs from
.0k-talon/logs/ - Scan current codebase for active issues
- Load layer configuration
- Read event logs from
-
Analyze Coverage
- Map active layers to OWASP/ATLAS
- Identify coverage gaps
- Calculate security posture score
-
Generate Report
- Format according to requested output
- Include actionable recommendations
- Save or display
Examples
Generate markdown report:
/0k-talon:report
Generate JSON for CI/CD integration:
/0k-talon:report json ./security-report.json
Generate HTML for stakeholder review:
/0k-talon:report html ./reports/security-assessment.html