transilience-report-style

Files (12)

• SKILL.md
• compliance-report.md
• Carlito-Bold.ttf · fonts/
• Carlito-BoldItalic.ttf · fonts/
• Carlito-Italic.ttf · fonts/
• Carlito-Regular.ttf · fonts/
• Poppins-Bold.ttf · fonts/
• Poppins-Italic.ttf · fonts/
• Poppins-Light.ttf · fonts/
• Poppins-Medium.ttf · fonts/
• Poppins-Regular.ttf · fonts/
• pentest-report.md

SKILL.md (first lines)

# Transilience AI — Threat Intelligence Report Design System

**Version:** 5.0 — **Light theme** (modern, minimal, professional)  
**Format:** PDF (A4), ReportLab  
**Last Updated:** July 7, 2026

---

## 0. Theme (v5.0)

The report now renders a **light theme by default** (white page, dark ink, brand accents). Both palettes live
in the `THEME` dict in `generate_report.py`; select with **`--theme light|dark`** (or `engagement.theme`).
**Precedence:** `--theme` > `engagement.theme` > `light`; an unknown value falls back to `light` (never errors).
The pentest-engagement finalize gate passes no `--theme`, so all gated PDFs are light. The sections below marked
"(dark fallback)" describe the retained `--theme dark` palette.

### 0.1 Light palette (brand: purple `#6941C6` → magenta `#C9317C`)

| Token | Hex | Use |
|---|---|---|
| `PAGE` / `SURFACE` | `#FFFFFF` | page + card background |
| `TINT` / `ALT` | `#F6F4FB` / `#FBFAFE` | KPI boxes · table headers/tracks · zebra rows |
| `INK` | `#1B1725` | headings + body text |
| `INK_SOFT` | `#5A5568` | secondary text |
| `LBL` | `#6B7280` | small labels / captions |
| `BORDER` | `#E7E3F0` | hairlines, card borders, table grid |
| `BRAND` / `BRAND2` | `#6941C6` / `#C9317C` | section numbers, rules, subheads / gradient end |
| `CODE_BG` / `CODE_INK` / `CODE_BORDER` | `#F5F4F8` / `#2A2536` / `#E4E0EE` | **boxed code / samples** (`codebox`) |
| `GREEN` / `BLUE` / `AMBER` | `#15803D` / `#2563EB` / `#B45309` | remediation / refs·CVE / caveat labels |
| `SEV` | Critical `#DC2626` · High `#EA580C` · Medium `#CA8A04` · Low `#16A34A` · Info `#64748B` | severity |

### 0.2 What v5 adds / changes

- **Light, airy layout** — white surfaces, hairline separators, generous padding/leading; colour used only
  semantically (severity / score / status).
- **Colour-coded risk & score** — severity via the finding-card **left stripe** + `[SEV]` tag; and in every
  risk table (**findings summary, CVE register, per-finding CVE table**) **both the severity label and the
  CVSS score cell are band-coloured + bold** — the label by its severity, the score by `score_band(score)`.
  `tbl(..., sevcol=, scorecol=)` selects the columns; the colour is emitted as an inline `<font>` tag inside
  the cell (a `TableStyle` `TEXTCOLOR` is **ignored** on ReportLab `Paragraph` cells, so it must live in the
  cell markup). Empty/non-numeric score cells stay uncoloured.
- **Highlighted code/samples** — `codebox()` renders CVSS vectors, PoC/test requests, affected assets, and
  endpoints in a bordered light-grey monospace block; **screenshots are framed** with a border + caption.
- **Finding cards** are a **single-column multi-row `Table`** (severity left-stripe + hairline box + padding)
  so tall Critical findings **split cleanly across pages** (border redrawn per fragment).
- **Logo** is drawn at its **true aspect ratio** (1024×468 → 0.457; ~48mm wide) — never squished.
- Graphical (severity-bar chart) + Tabular (findings index) summaries, DURATION cover row, per-finding Ease of
  Exploitation + References, and a Conclusion section are all light-themed.

---

## 1. Page & Document Configuration

| Property | Value |
|---|---|
| Page Size | A4 (595.28 × 841.89 pt) |
| Margins | 20mm all sides |
| Content Width (CW) | 555.28 pt (A4 width − 2 × 20mm) |
| Top Margin Offset | +8 pt (28mm effective top) |
| Bottom Margin Offset | +10 pt (30mm effective bottom) |
| Background Color | **`#FFFFFF` (light default)** · `#07040B` under `--theme dark` |
| Output | Embedded fonts, single PDF file |

---

## 2. Typography

### 2.1 Font Stack

| Alias | Font | Weight | Role |
|---|---|---|---|
| `FH` | Poppins-Bold | 700 | Headlines, metric values, section numbers, score values |
| `FM` | Poppins-Medium | 500 | Subheads, section labels, card section headers, sidebar labels |
| `FR` | Poppins (Regular) | 400 | Footer text, metadata labels, TOC sub-items |
| `FL` | Poppins-Light | 300 | Reserved (registered, not actively used) |
| `FI` | Poppins-Italic | 400i | Reserved (registered, not actively used) |
| `FB` | Carlito (Regular) | 400 | Body text, card summaries, table cells, bullet content |
| `FBB` | Carlito-Bold | 700 | Bold inline emphasis within body paragraphs |
| `FBI` | Carlito-Italic | 400i | Confidentiality notices, closing statement |
| `FBBI` | Carlito-BoldItalic | 700i | Registered for `<b><i>` combinations within Carlito |
| `FMONO` | Courier | — | MITRE technique IDs, CVE identifiers, subdomain names |

**Family Registration:** Carlito is registered as a full family (`normal`, `bold`, `italic`, `boldItalic`) enabling automatic style switching via ReportLab's `<b>` and `<i>` XML tags.

### 2.2 Type Scale

| Style Key | Font | Size | Leading | Color | Alignment | Usage |
|---|---|---|---|---|---|---|
| `ct` | Poppins-Bold | 36 pt | 44 pt | `#FFFFFF` | Left | Cover title ("THREAT INTELLIGENCE", "REPORT") |
| `cc` | Poppins-Medium | 18 pt | 24 pt | `#8B5CF6` | Left | Cover client name |
| `h1` | Poppins-Bold | 20 pt | 26 pt | `#FFFFFF` | Left | Section titles |
| `h2` | Poppins-Medium | 16 pt | 21 pt | `#FFFFFF` | Left | Subsection titles |
| `h3` | Poppins-Medium | 13 pt | 17 pt | `#8B5CF6` | Left | Sub-headers within sections |
| `tt` | Poppins-Medium | 13 pt | 18 pt | `#FFFFFF` | Left | Card titles, posture item titles |
| `body` | Carlito | 12 pt | 17 pt | `#F0F2F5` | Justify | Body paragraphs |
| `bs` | Carlito | 11 pt | 15 pt | `#F0F2F5` | Left | Small body (table cells, metadata values) |
| `ts` | Carlito | 11 pt | 16 pt | `#F0F2F5` | Justify | Card description text |
| `label` | Poppins | 10 pt | 13 pt | `#E0E3E8` | Left | Cover metadata labels |
| `sl` | Poppins-Medium | 10 pt | 13 pt | `#8B5CF6` | Left | Table column headers |
| `bullet` | Carlito | 12 pt | 17 pt | `#F0F2F5` | Left | Bullet items (14pt leftIndent, 0 bulletIndent) |
| `notice` | Carlito-Italic | 10 pt | 14 pt | `#E0E3E8` | Left | Confidentiality footer |

### 2.3 Advisory Card Typography

| Element | Font | Size | Color | Notes |
|---|---|---|---|---|
| Serial + Severity Tag | Poppins-Bold | 14 pt | Severity color | Format: `#1  [CRITICAL]` |
| Card Title | Poppins-Bold | 14 pt | `#FFFFFF` | Same line as serial, leading 20pt |
| Metadata Row | Carlito | 10 pt | `#F0F2F5` | Labels in `#8B5CF6`, pipe-separated |
| Score Labels | Poppins-Medium | 10 pt | `#F0F2F5` | "SEVERITY", "RELEVANCE", "PRIORITY" |
| Score Values | Poppins-Bold | 12 pt | Dynamic color | `0.85` format |
| Score Band Label | Poppins-Bold | 10 pt | Dynamic color | "HIGH", "MEDIUM", "LOW" (priority row only) |
| Section Headers | Poppins-Medium | 10 pt | `#8B5CF6` | "TECHNICAL DETAILS", "IMPACT CONTEXT", etc. |
| Detection Evidence Header | Poppins-Medium | 10 pt | `#10B981` | Green to distinguish from purple headers |
| Section Body | Carlito | 11 pt | `#F0F2F5` | leading 15pt |
| MITRE Label | Carlito | 11 pt | `#F59E0B` | Amber for "MITRE Tactics:", "Techniques:" |
| CVE Label | Carlito | 11 pt | `#3B82F6` | Blue for "CVEs:" |
| CVE/Technique Values | Courier | 10–11 pt | `#F0F2F5` | Monospace for IDs |
| Relevance Bullets | Carlito | 11 pt | `#F0F2F5` | • symbol, 16pt leftIndent, leading 16pt |

From transilienceai/communitytools, MIT.

More from transilienceai/communitytools