sec-zap-dast-integration

SUSPICIOUS: The skill is internally coherent and does not show credential harvesting, hidden exfiltration, or untrusted install chains, but it equips an AI agent to perform active security scanning against live targets. Main concerns are the inherent dual-use nature of DAST tooling and a stale Docker image reference, not evidence of malware.