skills.rest
CodySwannGT
CodySwannGTCOMMUNITY
Explore all skills by this author →
GitHub

OWASP ZAP Baseline Scanning

Automate OWASP ZAP baseline scans to identify common web application vulnerabilities.

3|3|Updated Jan 18, 2026
Search Tags:#ci/cd#security#web application security#vulnerability scanning#dast#owasp zap
One-click install
npx skills add https://github.com/CodySwannGT/lisa --skill owasp-zap-baseline-scanning
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: OWASP ZAP Baseline Scanning
Source: https://github.com/CodySwannGT/lisa/tree/main/plugins/lisa-expo/skills/owasp-zap
Command: npx skills add https://github.com/CodySwannGT/lisa --skill owasp-zap-baseline-scanning

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of identifying common security vulnerabilities in web applications using OWASP ZAP, helping to secure your applications before deployment.

Core Features & Use Cases

  • DAST Scanning: Performs Dynamic Application Security Testing against a running web application.
  • Vulnerability Identification: Detects common security flaws like missing security headers, insecure configurations, and potential injection points.
  • Use Case: After deploying a new version of your web application to a staging environment, run this Skill to get a quick security baseline report and address any high-risk findings before going to production.

Quick Start

Run the OWASP ZAP baseline scan against the current Expo web export.

Frequently Asked Questions about OWASP ZAP Baseline Scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate DAST scanning for web applications in a CI/CD pipeline?▼

You can automate DAST scanning by running OWASP ZAP baseline scans directly within your CI/CD pipelines. This Skill executes local Docker scans against running web apps to identify vulnerabilities automatically.

What security vulnerabilities does an OWASP ZAP baseline scan detect?▼

An OWASP ZAP baseline scan detects common security vulnerabilities across OWASP Top 10 categories. It identifies infrastructure and application-level issues like missing security headers and insecure configurations.

Can I run dynamic application security testing locally using Docker?▼

Yes, you can run dynamic application security testing locally using Docker. This Skill supports local execution to perform ZAP baseline scans against your running web application environment.

When should I run a web application vulnerability scan during deployment?▼

You should run a web application vulnerability scan after deploying to a staging environment. This provides a quick security baseline report to address high-risk findings before production deployment.

Do I need a running web application to perform DAST vulnerability scanning?▼

Yes, DAST vulnerability scanning requires a running web application. Dynamic Application Security Testing interacts with the live application to identify security flaws and potential injection points.

Related Skills

Explore More Software Engineering Skills→
Renzo-TognellaRenzo-Tognella

integrating-dast-with-owasp-zap-in-pipeline

Automate OZAP DAST scans in CI/CD pipelines with GitHub Actions or GitLab CI.

Community
Advanced
sugarforeversugarforever
131

Next.js Security Scan

Scan Next.js and TypeScript/JavaScript projects for security vulnerabilities.

Community
Advanced
AnsteorraAnsteorra
6

security-audit

Perform static and dynamic security audits on the KMP application.

Official
Advanced
kobogithubkobogithub

security-owasp-zap

Run OWASP ZAP baseline, API, and full scans against FastAPI and Supabase endpoints.

Community
Advanced