OpKnock/world-monitor-security-assessment ? reverse-engineered prompt

Build me a localhost only security assessment platform for my appsec lab. I want one web app where I can launch scans against a vulnerable demo app and a real codebase, see findings come in live, score them with CVSS v3.1, and then retest the same issue after I fix it to confirm it is gone.

Please include the main dashboard, login, assessment creation, scan progress, finding details, and report downloads in PDF, JSON, Markdown, and CSV. The tool should cover common checks like auth, authorization, input validation, headers, TLS, secrets, dependency issues, supply chain problems, GraphQL, port and banner checks, and basic fuzzing. Keep everything safe by limiting scans to localhost and private lab targets only.

I’d also like a clean API, a simple frontend, a small CLI if it helps, Docker support, and sensible defaults so I can run it quickly from a fresh clone. If you need to, look up current docs online for any libraries or best practices.