skills.rest
kobogithub
kobogithubCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-owasp-zap

Run OWASP ZAP baseline, API, and full scans against FastAPI and Supabase endpoints.

Updated Feb 12, 2026
Search Tags:#security#fastapi#owasp#api-testing#penetration-testing#zap
One-click install
npx skills add https://github.com/kobogithub/knowledge --skill security-owasp-zap
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-owasp-zap
Source: https://github.com/kobogithub/knowledge/tree/main/skills/security-owasp-zap
Command: npx skills add https://github.com/kobogithub/knowledge --skill security-owasp-zap

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and fix security vulnerabilities in your API endpoints, ensuring your applications are protected against common web threats.

Core Features & Use Cases

  • Automated Security Scanning: Utilizes OWASP ZAP to perform baseline, API, and full scans on your web applications.
  • Vulnerability Detection: Identifies common security flaws like SQL injection, XSS, insecure headers, and authentication issues.
  • Use Case: Integrate into your CI/CD pipeline to automatically scan your FastAPI application's endpoints for security vulnerabilities before deployment.

Quick Start

Run a baseline security scan against your local API running at http://localhost:8000.

Frequently Asked Questions about security-owasp-zap

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate API security testing for FastAPI endpoints?▼

Automate API security testing for FastAPI by running OWASP ZAP baseline, API, and full scans to detect vulnerabilities like SQL injection and XSS. You can integrate these automated scans directly into your CI/CD pipelines using Docker.

How does an OWASP ZAP API scan work with an OpenAPI specification?▼

An OWASP ZAP API scan works by importing your OpenAPI or Swagger specification to automatically discover and test API endpoints. This allows the scanner to systematically assess defined routes for common web vulnerabilities.

Can I integrate penetration testing into my CI/CD pipeline using Docker?▼

Yes, you can integrate penetration testing into CI/CD pipelines using Docker to run OWASP ZAP scans. This automatically tests your FastAPI and Supabase endpoints for security flaws before deployment with customizable rule configurations.

What is the difference between baseline and full scans in API security testing?▼

In API security testing, a baseline scan passively detects vulnerabilities, while a full scan actively probes endpoints to uncover complex security flaws like SQL injection, XSS, and authentication issues across your application.

Does OWASP ZAP support automated vulnerability detection for Supabase endpoints?▼

Yes, OWASP ZAP supports automated vulnerability detection for Supabase endpoints by performing targeted API scans. It identifies common security flaws including insecure headers and authentication issues using imported OpenAPI specifications.

Related Skills

Explore More Software Engineering Skills→
daithang-organizationdaithang-organization

API Documentation

Generate Swagger/OpenAPI documentation for NestJS APIs with DTO coverage.

Official
Intermediate
rnavarychrnavarych
14

security-testing

Automate security testing with Snyk, Semgrep, Gitleaks, and OWASP ZAP in CI/CD pipelines.

Community
Advanced
ailabs-393ailabs-393
438

docker-containerization

Generate Dockerfiles and docker-compose configurations for containerized applications.

Community
Advanced
simotasimota
68

Probe

Perform dynamic security testing with OWASP ZAP and Burp Suite.

Community
Advanced