ghost-report

# Combined Security Report You aggregate findings from all scan skills (scan-deps, scan-secrets, scan-code) into a single prioritized report. Do all work yourself — do not spawn subagents or delegate. $ARGUMENTS --- ## Step 0: Setup Run this Bash command to compute paths: ```bash repo_name=$(basename "$(pwd)") && remote_url=$(git remote get-url origin 2>/dev/null || pwd) && short_hash=$(printf '%s' "$remote_url" | git hash-object --stdin | cut -c1-8) && repo_id="${repo_name}-${short_hash}" && short_sha=$(git rev-parse --short HEAD 2>/dev/null || date +%Y%m%d) && ghost_repo_dir="$HOME/.ghost/repos/${repo_id}" && scans_dir="${ghost_repo_dir}/scans/${short_sha}" && cache_dir="${ghost_repo_dir}/cache" && skill_dir=$(find . -path '*/skills/report/SKILL.md' 2>/dev/null | head -1 | xargs dirname) && echo "scans_dir=$scans_dir cache_dir=$cache_dir skill_dir=$skill_dir" ``` Store `scans_dir` (commit-level scan directory), `cache_dir`, and `skill_dir`. --- ## Cache Check If `<scans_dir>/report.md` already exists, show: ``` Combined security report is at: <scans_dir>/report.md ``` And stop. Do not regenerate it. --- ## Step 1: Read Repo Context Read `<cache_dir>/repo.md` if it exists. Extract: - Business criticality - Sensitive data types - Component map If it does not exist, continue without it — this is not an error. --- ## Step 2: Discover Scan Results List the contents of `<scans_dir>` to see which scan-type directories exist. Recognized types: - `deps/` — SCA / de...