Individual skill
dast-automation
Automated Dynamic Application Security Testing (DAST) using Playwright MCP plus standard OS pentest tooling. Performs blackbox or greybox scans on single or multiple domains with orchestrated crawling, vulnerability detection, and structured output. Trigger on requests like "scan this domain", "run DAST on these URLs", "automated pentest", or "security-test the staging app".
skills/dast-automation/SKILL.md
Source commit a1a68f7010a9c97b22336dcbcfde539c492a7109
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- Yes
- Observed behavior
- Network or broad shell
- Last checked
- Nov 11, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 109
- Repository last updated
- Apr 19, 2026
- License
- Not available
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- security Derived category
- testing Derived category
- testing-browser Derived category
- security-application Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
.DS_Storeasset · 6,148 bytesREADME.mddoc · 7,200 bytesSKILL.mdcore · 8,869 bytesassets/config/scanning.yamlasset · 1,196 bytesassets/config/scope.yamlasset · 958 bytesassets/payloads/sqli_payloads.txtdoc · 463 bytesassets/payloads/xss_payloads.txtdoc · 705 bytesexamples/blackbox_basic.mddoc · 1,075 bytesexamples/continuous_setup.mddoc · 1,463 bytesexamples/github_actions_dast.ymlasset · 2,878 bytesexamples/greybox_multi_domain.mddoc · 1,419 bytesmethodology/crawling.mddoc · 2,885 bytesmethodology/recon.mddoc · 2,251 bytesmethodology/reporting.mddoc · 2,705 bytesmethodology/vuln_testing.mddoc · 4,024 bytespayloads/business_logic.txtdoc · 2,444 bytespayloads/crlf_smuggling.txtdoc · 1,488 bytespayloads/jwt_attacks.txtdoc · 1,402 bytespayloads/path_traversal.txtdoc · 1,420 bytespayloads/sqli.txtdoc · 1,839 bytespayloads/ssrf_cloud_metadata.txtdoc · 2,263 bytespayloads/xss_contexts.txtdoc · 1,690 bytesreferences/advanced_exploitation_techniques.mddoc · 19,569 bytesreferences/api_testing.mddoc · 7,699 bytesreferences/bounty_patterns_2024_2026.mddoc · 11,464 bytesreferences/dast_methodology.mddoc · 12,671 bytesreferences/hackerone_attack_patterns.mddoc · 28,660 bytesreferences/playwright_security_patterns.mddoc · 31,983 bytesreferences/reporting_guide.mddoc · 10,782 bytesreferences/tool_configuration.mddoc · 7,960 bytesreferences/vulnerability_testing.mddoc · 21,678 bytesschemas/finding.jsonasset · 2,979 bytesscripts/check_findings.pyruns · 4,311 bytesscripts/continuous_dast.shruns · 5,410 bytesscripts/dast_orchestrator.pyruns · 7,914 bytesscripts/nuclei_runner.pyruns · 8,049 bytesscripts/playwright_crawler.pyruns · 9,724 bytesscripts/playwright_dast_scanner.pyruns · 13,788 bytesscripts/report_generator.pyruns · 11,411 bytesscripts/vulnerability_tester.pyruns · 15,499 bytesworkflows/blackbox_single_domain.mddoc · 3,295 bytesworkflows/continuous_scanning.mddoc · 2,582 bytesworkflows/greybox_authenticated.mddoc · 3,499 bytesworkflows/multi_domain_parallel.mddoc · 2,600 bytes
No licensed excerpt is available. You can inspect the pinned source.