skills.rest
gaiastudio-ai
gaiastudio-aiOFFICIAL
Explore all skills by this author →
GitHub

gaia-test-dast

Execute post-deploy DAST scans with OWASP ZAP and LLM risk assessment.

2|Updated Apr 15, 2026
Search Tags:#security testing#DAST#agile delivery#OWASP ZAP#LLM judgment
One-click install
npx skills add https://github.com/gaiastudio-ai/gaia-framework --skill gaia-test-dast
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: gaia-test-dast
Source: https://github.com/gaiastudio-ai/gaia-framework/tree/main/plugins/gaia/skills/gaia-test-dast
Command: npx skills add https://github.com/gaiastudio-ai/gaia-framework --skill gaia-test-dast

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires owasp-zap, and includes scripts (resource) and references (resource) components.

What problem does it solve?

The gaia-test-dast Skill automates the execution of post-deploy dynamic application security tests, identifying and resolving security vulnerabilities early in the software delivery cycle.

Core Features & Use Cases

  • DAST Testing: Utilizes the OWASP ZAP DAST adapter to perform automated security scanning of deployed applications.
  • Risk Assessment: Integrates LLM judgment for severity triage and compliance impact assessment.
  • Integration: Functions as part of a larger agile delivery process, complementing other GAIA skills.

Quick Start

To run a DAST test on a specified story, use the command: /gaia-test-dast [story-key].

Frequently Asked Questions about gaia-test-dast

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate post-deploy DAST testing in an agile delivery pipeline?▼

You can automate post-deploy DAST testing by executing dynamic application security tests using the OWASP ZAP adapter and LLM judgment for vulnerability triage during the deployment phase of your agile software delivery cycle.

Do I need an OWASP ZAP instance to run dynamic application security tests?▼

Yes, you must have a configured OWASP ZAP instance available to execute the dynamic application security testing adapter and perform automated security scanning on your deployed applications.

How does LLM judgment help with dynamic application security testing?▼

LLM judgment integrates with DAST results to perform severity triage and compliance impact assessment, helping evaluate vulnerabilities based on your specific project risk profiles.

What is the best way to run a DAST test on a specific user story?▼

The best way to run DAST testing on a specific story is to use the /gaia-test-dast command with your target story-key, which triggers the automated security scan against the deployed application.

When should I use DAST testing in the software development lifecycle?▼

DAST testing should be used during the deployment phase of the agile software development lifecycle to identify and resolve security vulnerabilities early in the delivery process.

Related Skills

Explore More Software Engineering Skills→
BagelHoleBagelHole
46

dast-scanning

Perform DAST scans on web applications and APIs with OWASP ZAP.

Community
Intermediate
mtsatryanmtsatryan
1

security-auditor

Identify and remediate security vulnerabilities and compliance gaps across applications, infrastructure, and code.

Community
Advanced
JaviMontanoJaviMontano

apex-risk-monitoring

Aggregate schedule, budget, sentiment, and event signals into a real-time risk dashboard.

Community
Advanced
CENKSSSCENKSSS

pentest-validation

Validate SAST and DAST vulnerability exploitability through a 4-phase pipeline.

Community
Advanced