Identify and validate DAST security findings in authorized runtime targets.
npx skills add https://github.com/ace3/skills --skill security-dast
Please help me install this Agent Skill. Skill: security-dast Source: https://github.com/ace3/skills/tree/main/skills/security-dast Command: npx skills add https://github.com/ace3/skills --skill security-dast
Blackbox/dynamic application security testing for authorized runtime targets, active surface scans, API/web probing, TLS checks, fuzzing, pentest-style validation, finding normalization, enterprise security reports, and retest evidence. It enables teams to perform secure, scope-limited security testing while producing actionable findings and remediation plans.
Load the base layer and begin an authorized DAST workflow against your scoped targets.
High-intent search queries and answers about installing and using this skill.
Dynamic application security testing on deployed web APIs is performed by identifying in-scope runtime targets and probing them actively to collect evidence, severity ratings, and structured remediation guidance.
Evidence-driven remediation validates active security findings by capturing runtime proof, classifying the evidence into structured findings, and generating actionable remediation steps alongside retest verification status.
This DAST workflow is compatible with toolchains like ZAP, Nuclei, SSLyze, and Naabu, leveraging their outputs to normalize findings into enterprise-ready security reports.
Structuring enterprise security reports from pentest validation involves classifying target evidence and tool outputs into normalized findings that include remediation roadmaps and iterative retest evidence.
This dynamic testing approach supports scope-limited scans by loading a base operating layer that enforces planning gates, surgical changes, and non-destructive verification against authorized targets.
Fuzzing and TLS checks are needed during web application security testing when probing active runtime surfaces to validate vulnerabilities and capture structured evidence for enterprise reporting.
XerrionRun authorized DAST and infrastructure security tests on live targets.
weirdgmeAutomate security integration across CI/CD pipelines with policy-as-code enforcement.
seb1nProbe live web applications and APIs for vulnerabilities using OWASP ZAP and Nuclei.
jassicsTriage SAST findings to rank true vulnerabilities and suggest remediation.
