dynamic-application-security-testing
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides specific shell commands for the agent to execute, including Docker commands to run OWASP ZAP and CLI invocations for Nuclei security testing.
- [EXTERNAL_DOWNLOADS]: The workflow involves pulling and running official Docker images from the OWASP organization and utilizing external security templates.
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and analyze data from external, potentially untrusted web applications during the scanning process, which serves as a vector for indirect instructions.
- Ingestion points: Scanned application response headers, bodies, and vulnerability reports (referenced in SKILL.md, Workflow steps 3 and 4).
- Boundary markers: The instructions do not specify any delimiters or markers to separate untrusted response data from agent instructions during analysis.
- Capability inventory: Shell command execution for scanning tools and file system writes for generating reports in various formats (HTML, JSON, SARIF).
- Sanitization: There is no mention of sanitizing or validating external content before it is processed and analyzed by the agent.
Audit Metadata