Dynamic application security testing (DAST) using OWASP ZAP (Zed Attack Proxy) with passive and active scanning, API testing, and OWASP Top 10 vulnerability detection. Use when: (1) Performing runtime security testing of web applications and APIs, (2) Detecting vulnerabilities like XSS, SQL injection, and authentication flaws in deployed applications, (3) Automating security scans in CI/CD pipelines with Docker containers, (4) Conducting authenticated testing with session management, (5) Generating security reports with OWASP and CWE mappings for compliance.
$npx -y skills add agentsecops/secopsagentkit --skill dast-zapInstalls into the current project.
Run `npx skills use "https://github.com/agentsecops/secopsagentkit" --skill "agentsecops/secopsagentkit/dast-zap"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/agentsecops/secopsagentkit" that are relevant to the current task. Run `npx skills add "https://github.com/agentsecops/secopsagentkit"` and select the relevant skills, then follow their instructions.