ffuf-web-fuzzing
Expert guidance for ffuf web fuzzing during authorized penetration testing. Covers directory discovery, subdomain enumeration,…
Use when the user explicitly asks for a desktop or system screenshot (full screen, specific
$ npx -y skills add trailofbits/skills-curated --skill openai-screenshot --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
/openai-screenshotContext preview
The summary Claude sees to decide when to auto-load this skill.
Use when the user explicitly asks for a desktop or system screenshot (full screen, specific
name: openai-screenshot description: Use when the user explicitly asks for a desktop or system screenshot (full screen, specific app or window, or a pixel region), or when tool-specific capture capabilities are unavailable and an OS-level capture is needed. Originally from OpenAI's curated skills catalog. allowed-tools: - Bash - Read - Grep - Glob - Write - Edit
Follow these save-location rules every time:
1) If the user specifies a path, save there. 2) If the user asks for a screenshot without a path, save to the OS default screenshot location. 3) If the agent needs a screenshot for its own inspection, save to the temp directory.
On macOS, run the preflight helper once before window/app capture. It checks Screen Recording permission, explains why it is needed, and requests it in one place.
The helpers route Swift's module cache to `$TMPDIR/codex-swift-module-cache` to avoid extra sandbox module-cache prompts.
bash {baseDir}/scripts/ensure_macos_permissions.shTo avoid multiple sandbox approval prompts, combine preflight + capture in one command when possible:
bash {baseDir}/scripts/ensure_macos_permissions.sh && \
python3 {baseDir}/scripts/take_screenshot.py --app "the agent"For the agent inspection runs, keep the output in temp:
bash {baseDir}/scripts/ensure_macos_permissions.sh && \
python3 {baseDir}/scripts/take_screenshot.py --app "<App>" --mode tempUse the bundled scripts to avoid re-deriving OS-specific commands.
Run the helper from the repo root:
python3 {baseDir}/scripts/take_screenshot.pyCommon patterns:
python3 {baseDir}/scripts/take_screenshot.pypython3 {baseDir}/scripts/take_screenshot.py --mode temppython3 {baseDir}/scripts/take_screenshot.py --path output/screen.pngpython3 {baseDir}/scripts/take_screenshot.py --app "the agent"python3 {baseDir}/scripts/take_screenshot.py --app "the agent" --window-name "Settings"python3 {baseDir}/scripts/take_screenshot.py --list-windows --app "the agent"python3 {baseDir}/scripts/take_screenshot.py --mode temp --region 100,200,800,600python3 {baseDir}/scripts/take_screenshot.py --mode temp --active-windowpython3 {baseDir}/scripts/take_screenshot.py --window-id 12345The script prints one path per capture. When multiple windows or displays match, it prints multiple paths (one per line) and adds suffixes like `-w<windowId>` or `-d<display>`. View each path sequentially with the image viewer tool, and only manipulate images if needed or requested.
bash {baseDir}/scripts/ensure_macos_permissions.sh && \
python3 {baseDir}/scripts/take_screenshot.py --app "<App>" --mode tempThe helper automatically selects the first available tool:
1) `scrot` 2) `gnome-screenshot` 3) ImageMagick `import`
If none are available, ask the user to install one of them and retry.
Coordinate regions require `scrot` or ImageMagick `import`.
`--app`, `--window-name`, and `--list-windows` are macOS-only. On Linux, use `--active-window` or provide `--window-id` when available.
Run the PowerShell helper:
powershell -ExecutionPolicy Bypass -File {baseDir}/scripts/take_screenshot.ps1Common patterns:
powershell -ExecutionPolicy Bypass -File {baseDir}/scripts/take_screenshot.ps1powershell -ExecutionPolicy Bypass -File {baseDir}/scripts/take_screenshot.ps1 -Mode temppowershell -ExecutionPolicy Bypass -File {baseDir}/scripts/take_screenshot.ps1 -Path "C:\Temp\screen.png"powershell -ExecutionPolicy Bypass -File {baseDir}/scripts/take_screenshot.ps1 -Mode temp -Region 100,200,800,600powershell -ExecutionPolicy Bypass -File {baseDir}/scripts/take_screenshot.ps1 -Mode temp -ActiveWindowpowershell -ExecutionPolicy Bypass -File {baseTrail of Bits' reviewed and approved Claude Code plugins. Every skill and marketplace here has been vetted for quality and safety.
Expert guidance for ffuf web fuzzing during authorized penetration testing. Covers directory discovery, subdomain enumeration,…
Reverse engineers binaries using Ghidra's headless analyzer. Use when decompiling executables, extracting functions, strings,…
Remove signs of AI-generated writing from text. Use when editing or reviewing text to make it sound more natural and…
Researches a topic from the last 30 days on Reddit, X, and the web. Surfaces real community discussions with engagement metrics…
Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform
Use when the agent is building or iterating on a web game (HTML/JS) and needs a reliable