recon-screenshot-map

Capture headless browser screenshots of live web assets for visual triage.

Updated Jul 30, 2026
One-click install
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill recon-screenshot-map
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: recon-screenshot-map
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/recon-screenshot-map
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill recon-screenshot-map

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill solves the challenge of manually triaging large lists of web assets by providing a visual inventory, allowing operators to quickly identify high-interest targets like admin panels, default installs, and error pages.

Core Features & Use Cases

  • Automated Visual Mapping: Captures screenshots of live HTTP/HTTPS services using headless browser automation.
  • Intelligent Triage: Classifies assets by visual signals such as CMS versions, login portals, and information disclosure patterns.
  • Use Case: During a large-scale engagement, use this skill to scan hundreds of discovered subdomains to instantly spot exposed Jenkins instances or phpinfo pages that require immediate attention.

Quick Start

Use the recon-screenshot-map skill to capture visual snapshots of all live URLs found in the current scope file.

Frequently Asked Questions about recon-screenshot-map

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate web screenshots for large-scale asset inventory?

Automated web screenshots for asset inventory are captured using headless browser automation to scan live HTTP/HTTPS services. This process generates a visual map of subdomains, allowing rapid identification of exposed interfaces and default CMS installations.

What is the best way to visually triage discovered web assets during pentesting?

Visual triage of web assets involves capturing snapshots of live URLs to classify visual signals like login portals and information disclosure patterns. This allows operators to quickly spot high-interest targets such as exposed Jenkins instances or phpinfo pages.

Does automated screenshot capture work with headless browser tools like gowitness or aquatone?

Automated screenshot capture integrates with headless browser tools like gowitness or aquatone to ensure safe execution. This integration enables rate-limited snapshot generation and visual mapping of web services across the validated scope.

Can I scan hundreds of subdomains to identify exposed admin panels automatically?

You can scan hundreds of discovered subdomains to automatically identify exposed admin panels and error pages. The skill applies intelligent triage to visual snapshots, instantly highlighting targets that require immediate security attention.

Do I need scope validation and authorization checks before capturing web screenshots?

Scope validation and authorization checks are required before capturing web screenshots to ensure safe execution. These preparatory steps guarantee that rate-limited headless browser automation only targets approved live HTTP/HTTPS services.