owasp-zap

BENIGN for purpose alignment and supply-chain trust: it is a coherent OWASP ZAP skill using official registries and same-org GitHub resources. Security risk is still elevated because it equips an AI agent to perform active web security scanning and penetration-testing actions against live targets, so use should be tightly scoped to authorized environments.