owasp-zap
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill serves as a guide for using OWASP ZAP, a reputable open-source web application security scanner. The instructions focus on best practices for DAST (Dynamic Application Security Testing) and automated scanning in CI/CD environments.\n- [EXTERNAL_DOWNLOADS]: The skill references official Docker images from the ZAP project (
ghcr.io/zaproxy/zaproxy:stable,owasp/zap2docker-stable) and the official GitHub Action for ZAP baseline scans (zaproxy/action-baseline@v0.12.0). These are well-known and trusted resources within the security community.
Audit Metadata