The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references official OWASP ZAP Docker images and GitHub Actions. Specifically, it points to ghcr.io/zaproxy/zaproxy and zaproxy/action-baseline, which are the official distribution channels for the ZAP project. These references are documented neutrally as part of the intended functionality.
[COMMAND_EXECUTION]: The skill provides instructions for using standard ZAP scripts such as zap-baseline.py, zap-full-scan.py, and zap-api-scan.py. These are documented as part of established security scanning procedures and do not involve arbitrary or hidden command execution.
[SAFE]: The instructions follow security best practices, such as recommending passive scanning for CI/CD environments and restricting active (destructive) scanning to staging environments rather than production.

owasp-zap