dast-baseline-scanning
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements strong security guardrails, including a mandatory authorization pre-check (Step 3) and a strict prohibition on active scanning (Step 8). It forces the use of local wrappers rather than raw CLI commands to prevent misuse. The metadata contains a deny-list for high-risk active scanning scripts (zap-full-scan.py, zap-api-scan.py).
Audit Metadata