evidence-capture

What problem does it solve?

This Skill provides a standardized and comprehensive method for capturing, organizing, and documenting all forms of evidence related to security vulnerabilities, ensuring reproducibility and clarity in reporting.

Core Features & Use Cases

• Standardized Evidence Types: Supports HTTP logs, screenshots, tool outputs, videos, code snippets, and configuration files.
• Consistent Naming & Directory Structure: Enforces a clear convention (evidence/<finding_id>/<type>_<description>_<timestamp>.<ext>) for easy management.
• Use Case: After discovering an XSS vulnerability, use this skill to capture the malicious HTTP request/response, a screenshot of the executed payload, and any PoC exploit code, all organized under the specific finding ID.

Quick Start

Capture detailed evidence for finding F-001, including HTTP requests, responses, and a screenshot of the admin panel.