The Agent Skills Directory

[COMMAND_EXECUTION]: The skill facilitates the execution of security testing tools through shell commands and Docker. It invokes docker run for ZAP scans and python3 for authentication scripts, which is the core functionality for a DAST orchestration tool.- [EXTERNAL_DOWNLOADS]: The skill references and utilizes resources from reputable sources, including official OWASP ZAP Docker images (zaproxy/zap-stable) and verified GitHub Actions from the zaproxy and github organizations. These downloads represent standard operational requirements for the tool.- [CREDENTIALS_UNSAFE]: Placeholder credentials and example authentication contexts are provided in reference guides and XML templates (e.g., TestPassword123!). These are explicitly used as documentation examples for user configuration and do not represent hardcoded secrets for the skill's execution environment.- [SAFE]: No malicious patterns such as code obfuscation, base64-encoded payloads, persistence mechanisms, or unauthorized data exfiltration were identified during the audit.

dast-zap