See a full Skarn report before you run one

The corpus is hand-authored and every credential in it is fake, but nothing in the report is mocked: the findings, severities, the attack chain, and the 83/100 risk score are what Skarn's shipping detection engine produced from those sessions.

Skarn's report format never carries a raw secret: credentials are masked to a fixed form that hides their length, and PII reveals zero characters. What you see here is exactly what a report you share with your security team looks like.

The report is a single HTML file. It loads no external resources and makes no network requests - the same local-only property as the scanner that wrote it. Your own report stays on your machine unless you choose to share it.

The 0-100 score aggregates severity, chain evidence, and credential liveness signals per session. Two hours of work on this machine scores 83: six critical and thirteen high findings across five sessions.

One multi-stage chain was correlated, running reconnaissance to exfiltration to poisoning across MITRE ATLAS tactic-aligned stages - the pattern a plain secret scanner cannot see.

Filter by severity. Each finding names the rule, the session, and the redacted value - enough to rotate the credential, never enough to leak it again.