screenshot-triage

What problem does it solve?

Manually sorting through large volumes of web application screenshots from BBOT scans to identify high-value targets for vulnerability discovery is time-consuming and prone to missing critical assets like admin panels and internal tools. This Skill automates the triage process to ensure human testers focus their efforts on the most promising targets.

Core Features & Use Cases

• Priority Classification: Categorize screenshots into critical, high, medium, and low tiers based on exploitation potential, covering admin interfaces, API docs, debug toolbars, and static content.
• Visual & Technical Analysis: Identify red flags like unstyled internal tools, framework default pages, stack traces, and default credential hints to assess asset value.
• Use Case: During an external attack surface assessment, use this Skill to process hundreds of BBOT-captured screenshots and surface the 10% of assets most likely to yield critical vulnerabilities for manual testing.

Quick Start

Use the screenshot-triage skill to analyze all unprocessed WEBSCREENSHOT nodes from your latest BBOT scan and return a prioritized list of high-value targets for manual investigation.