skills.rest
hardw00t
hardw00tCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

dast-automation

Automate dynamic application security testing across web apps using Playwright MCP.

90|14|Updated Jan 12, 2026
Search Tags:#automation#reporting#playwright#ci-cd#security-testing#dast#multi-domain
One-click install
npx skills add https://github.com/hardw00t/ai-security-arsenal --skill dast-automation
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dast-automation
Source: https://github.com/hardw00t/ai-security-arsenal/tree/main/skills/dast-automation
Command: npx skills add https://github.com/hardw00t/ai-security-arsenal --skill dast-automation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This skill eliminates manual, repetitive dynamic security testing by orchestrating Playwright MCP-driven DAST across web applications.

Core Features & Use Cases

  • Blackbox & Greybox Testing: Perform unauthenticated and authenticated dynamic analysis across a single domain or multiple domains.
  • Multi-Domain Orchestration: Run parallel scans and aggregate results to speed up security assessments.
  • Comprehensive Reporting: Generate JSON, HTML, and Markdown reports and integrate findings into CI/CD pipelines.
  • Tool Integration: Leverages common security testing patterns and integrates with Nuclei, ZAP, and vulnerability patterns for real-world coverage.

Quick Start

Use the Playwright DAST workflow to initiate scans:

  • Start a blackbox scan: python3 scripts/playwright_dast_scanner.py --target https://example.com --mode blackbox --output results/example-com.json
  • Orchestrate multiple domains: python3 scripts/dast_orchestrator.py --domains domains.txt --mode blackbox --output results/

Frequently Asked Questions about dast-automation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate DAST across multiple web domains?▼

You can automate dynamic application security testing across multiple domains by using a domain orchestration script that runs parallel scans and aggregates the results into JSON, HTML, or Markdown reports.

Can I run authenticated DAST scans using Playwright?▼

Yes, Playwright MCP supports greybox testing for authenticated dynamic analysis alongside unauthenticated blackbox scans across single or multiple domains.

What reporting formats are generated by automated security testing scripts?▼

Automated security testing scripts generate multi-format reports including JSON, HTML, and Markdown, which can be directly integrated into CI/CD pipelines for vulnerability tracking.

Does this DAST automation tool integrate with Nuclei and ZAP?▼

Yes, the DAST automation workflow leverages common security testing patterns and integrates with Nuclei, ZAP, and vulnerability patterns to provide real-world coverage.

How do I run a blackbox scan from the command line for a single target?▼

You can execute a blackbox scan by running the scanner script with target, mode, and output parameters, such as specifying the URL and outputting results to a JSON file.

Related Skills

Explore More Software Engineering Skills→
cloud-native-toolscloud-native-tools

extension-e2e-test

Automate Chrome Manifest V3 extension end-to-end tests with Playwright.

Official
Advanced
pluginagentmarketplacepluginagentmarketplace
3

red-team-reporting

Generate security assessment reports from structured findings in Markdown, HTML, PDF, or DOCX.

Community
Basic
devkenidevkeni
1

dast-automation

Automate DAST testing for web applications using Playwright MCP.

Community
Advanced
froggugugugufroggugugugu

security-scan

Execute SCA, SAST, DAST, and secret detection scans to report vulnerabilities.

Community
Advanced