sec-audit-dast

This Skill automates DAST scanning by running URL and IP discovery, probing external assets, and aggregating normalized findings into standardized SARIF outputs for consistent runtime security reporting.

ASM involves discovering and probing external assets for exposures, and you need SARIF output when integrating structured runtime findings into security architecture reviews or cross-tool vulnerability management workflows.

Yes, this DAST automation tool supports both URL-based and IP-based discovery, probing external assets and mapping severity and impacted flows to ensure structured findings validated against provided schemas.

You normalize security scanner findings into SARIF format by running scan batches through this workflow, which validates provenance, impacted_flow, and severity mapping against schemas to ensure structured traceability.

Yes, you can integrate SARIF findings from DAST scans with a security architecture review, because this Skill provides a common reporting surface designed for cross-skill use and traceability across the assessment lifecycle.

A key limitation of automating runtime security assessments is ensuring data accuracy; this Skill requires validation against provided schemas to guarantee structured findings, provenance, and impacted_flow traceability for external assets.