DAST Automation with Playwright MCP

Thin router. Specific guidance lives in workflows/, methodology/, payloads/, and examples/. Read this file first, then lazy-load only the files you need for the task.

When to Use

• Operator asks for a DAST / dynamic security scan of one or more web apps.
• Blackbox external scan of a single domain.
• Greybox (authenticated) scan with provided credentials.
• Parallel scanning across a fleet of domains.
• Setting up continuous / scheduled DAST with baseline diffing.
• CI/CD integration to block regressions on new Critical/High issues.

Trigger Phrases

"scan ", "run DAST", "blackbox scan", "greybox scan", "authenticated pentest", "spider and test this app", "security-test these URLs", "weekly security scan", "continuous DAST".

When NOT to Use This Skill