sec-zap-dast-integration
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends using the official
owasp/zap2docker-stableDocker image. This is a reference to a well-known and reputable security tool from the OWASP organization. - [COMMAND_EXECUTION]: Provides example shell commands for running security scans, such as
docker run -t owasp/zap2docker-stable zap-baseline.py -t http://host.docker.internal:8080/. These commands are standard for the intended use case of the skill. - [PROMPT_INJECTION]: The skill is designed to ingest and triage ZAP scan reports provided by the user. This creates an attack surface for indirect prompt injection where malicious content in a report could attempt to influence the agent's behavior.
- Ingestion points: User-provided ZAP scan results in JSON or text format (documented in SKILL.md).
- Boundary markers: Absent; there are no specific instructions to the agent to ignore embedded commands within the ingested reports.
- Capability inventory: The skill provides instructional guidance and does not include any scripts that execute subprocesses, eval/exec, or network operations.
- Sanitization: Absent; no specific validation or filtering of the ingested report content is mentioned.
Audit Metadata