skills-ws/skills/security-pentester/references/4-interpreting-reports.md

87 agent skills for AI coding assistants — marketing, growth, web3, dev, design & operations. Built for OpenClaw, Claude Code, Cursor, and Codex.

## Contents

- 4. Interpreting Reports
- Severity Levels
- Reading a Finding

## 4. Interpreting Reports

### Severity Levels

| Severity | Definition | Action |
|----------|-----------|--------|
| **Critical** | Direct data breach, RCE, full authentication bypass | Fix immediately, consider taking app offline |
| **High** | Significant data exposure, privilege escalation, stored XSS | Fix within 24-48 hours |
| **Medium** | Limited data exposure, CSRF, reflected XSS, information disclosure | Fix within 1-2 weeks |
| **Low** | Minor information leaks, missing headers, verbose errors | Fix in next sprint |

### Reading a Finding

Each finding in the report includes:

```markdown