dast-automation

Automate dynamic application security testing across web apps using Playwright MCP.

90|14|Updated Jan 12, 2026

Search Tags:#automation #reporting #playwright #ci-cd #security-testing #dast #multi-domain

Ready to run

npx skills add https://github.com/hardw00t/ai-security-arsenal --skill dast-automation

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: dast-automation
Source: https://github.com/hardw00t/ai-security-arsenal/tree/main/skills/dast-automation
Command: npx skills add https://github.com/hardw00t/ai-security-arsenal --skill dast-automation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This skill eliminates manual, repetitive dynamic security testing by orchestrating Playwright MCP-driven DAST across web applications.

Core Features & Use Cases

Blackbox & Greybox Testing: Perform unauthenticated and authenticated dynamic analysis across a single domain or multiple domains.
Multi-Domain Orchestration: Run parallel scans and aggregate results to speed up security assessments.
Comprehensive Reporting: Generate JSON, HTML, and Markdown reports and integrate findings into CI/CD pipelines.
Tool Integration: Leverages common security testing patterns and integrates with Nuclei, ZAP, and vulnerability patterns for real-world coverage.

Quick Start

Use the Playwright DAST workflow to initiate scans:

Start a blackbox scan: python3 scripts/playwright_dast_scanner.py --target https://example.com --mode blackbox --output results/example-com.json
Orchestrate multiple domains: python3 scripts/dast_orchestrator.py --domains domains.txt --mode blackbox --output results/

Frequently Asked Questions about dast-automation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate DAST across multiple web domains?▼

You can automate dynamic application security testing across multiple domains by using a domain orchestration script that runs parallel scans and aggregates the results into JSON, HTML, or Markdown reports.

Can I run authenticated DAST scans using Playwright?▼

Yes, Playwright MCP supports greybox testing for authenticated dynamic analysis alongside unauthenticated blackbox scans across single or multiple domains.

What reporting formats are generated by automated security testing scripts?▼

Automated security testing scripts generate multi-format reports including JSON, HTML, and Markdown, which can be directly integrated into CI/CD pipelines for vulnerability tracking.

Does this DAST automation tool integrate with Nuclei and ZAP?▼

Yes, the DAST automation workflow leverages common security testing patterns and integrates with Nuclei, ZAP, and vulnerability patterns to provide real-world coverage.

How do I run a blackbox scan from the command line for a single target?▼

You can execute a blackbox scan by running the scanner script with target, mode, and output parameters, such as specifying the URL and outputting results to a JSON file.