# Tenable SC Reporting Assistant

> Generate & upload Tenable SC dashboards, PDF reports, and CSV exports via tested XML builders.

- Type: Skill
- Author: hamzhk15
- License: MIT
- Trust tier: contributed (passed automated validation and a baseline maintainer review)
- Last reviewed: 2026-07-31
- Source repository: https://github.com/hamzhk15/tenable-sc-reporting-assistant
- Repo state: not archived
- Last push: 2026-07-27T11:55:05Z
- Stars: 6 (a popularity signal, not a safety signal)
- Forks: 0 (a popularity signal, not a safety signal)
- Open issues: 0
- Language: Python
- Health checked at: 2026-11-05T20:35:15.821Z
- Integrations: Tenable
- Domains: platform-operations
- Tags: tenable-sc, security-center, vulnerability-management, dashboards, reporting, compliance
- Date added: 2026-07-27
- Compatible platforms: Claude Code
- Invocation: `/tenable-sc-reporting-assistant`
- Listing page: https://exchange.tenable.com/skills/tenable-sc-reporting-assistant
- Source file: https://github.com/tenable/cyberagents-exchange/blob/main/skills/tenable-sc-reporting-assistant.md

Build importable **Tenable Security Center (Tenable SC / SecurityCenter)** XML —
dashboards, PDF reports, and CSV exports — and optionally upload them straight
into a console over the SC REST API. Everything is generated by tested builders
and pre-flight validated, so the byte-accurate PHP-serialized definitions SC
requires are never hand-written.

## What it does

- Generates three artifact types: **dashboards** (`<dashboardTab>`), **PDF
  reports** (`<report>` pdf), and flat **CSV vulnerability exports** (`<report>`
  csv).
- Runs **two ways**: a **freeform mode** that maps any dashboard/report you
  describe to a catalog of known-good components (matrices, tables, line/pie
  charts, iterators, CSV) and proposes the layout for approval; and a **curated
  Vulnerability Management & Remediation Planning** template as a ready-made
  starting point.
- Covers vulnerability-trend, scanning-history, risk by asset group / severity /
  VPR, SLA compliance, top remediation opportunities, and per-host or
  per-vulnerability breakdowns.
- Optionally **uploads** the generated XML into a live SC console via the REST
  API (stdlib-only, no third-party dependencies), or hands you the files for
  manual import.

## How it works

A short interview (or a freeform description) becomes a config that flows
through a global-filter injector and into the tested `sc_dashboard` /
`sc_report` builders — never hand-authored XML. Every file is then checked by
`validate.py` for the known import-failure classes (PHP byte-prefix integrity,
invisible foreground==background colors, missing table schedules, matrix
cluster counts, `sumip` host-count cells, and accidental Info-severity filters)
before delivery. Uploads use the two-step SC REST import (`file/upload` →
`dashboard/import` or `reportDefinition/import`) with API-key auth.

This is the Markdown version of one of 140 listings on CyberAgents Exchange. The same listing as JSON: https://exchange.tenable.com/api/skills/tenable-sc-reporting-assistant.json. The full index and how to read it: https://exchange.tenable.com/llms.txt