Screenshot + Visual Analysis Skill

Uses browser automation to capture screenshots and analyze pages for interesting security indicators.

When to Use

Use this skill when you need to:

• Capture screenshots of target pages for visual bug bounty recon
• Find exposed panels, debug interfaces, or login pages
• Detect weak security headers visually
• Build a visual inventory of a target's web surface

Workflow

1. Navigate to target URL and capture screenshot
2. Collect page source, security headers, and JavaScript endpoints
3. Analyze for security-relevant indicators
4. Report findings with severity and evidence

Quick Start

node scripts/screenshot.js https://example.com

Configuration

Default output dir: screenshots/ (created in workspace) Default viewport: 1280x720 Full page screenshot: yes

Example Prompts

• "Take screenshots and analyze visually for example.com"
• "Visual recon with screenshots on target.com"
• "Check login pages for issues"

Requirements

• Requires playwright-mcp or equivalent browser automation
• Node.js environment with @playwright/mcp installed
• playwright browser binaries (npx playwright install chromium)

Output

Each run produces:

• screenshots/\x3Cdomain>/\x3Cpath>-\x3Ctimestamp>.png — screenshot file
• screenshots/\x3Cdomain>/\x3Cpath>-\x3Ctimestamp>.json — metadata + headers

Security Notes

• Screenshots are saved locally only
• No data leaves the machine except browser requests to the target
• Respect target scope and rate limits