screenshot-triage

This Skill triages web screenshots from BBOT scans by processing WEBSCREENSHOT nodes to classify assets into priority tiers based on exploitation potential, filtering large volumes of captured web pages to surface high-value targets like admin panels for manual vulnerability investigation.

During screenshot triage, look for visual red flags like unstyled internal tools, framework default pages, stack traces, and default credential hints to assess asset value and identify weak security controls for red teaming.

Yes, this automatically detects admin panels and developer tools by classifying captured web application screenshots into critical, high, medium, and low priority tiers based on their exploitation potential and visual indicators.

The best way to process hundreds of web screenshots for vulnerability discovery is to automate the triage process, categorizing assets so human testers focus manual testing efforts on the small percentage of assets most likely to yield critical findings.

Yes, screenshot triage classifies static content differently from API docs and debug toolbars by assigning it lower priority tiers, while categorizing API documentation and debug toolbars as higher-value targets for manual vulnerability investigation.