Runs automated DAST scans against REST and GraphQL APIs using OWASP ZAP daemon API. Detects injection flaws, broken auth, and CORS misconfigurations with detailed remediation steps.

OWASP ZAP API Security Tester

Runs automated DAST scans against REST and GraphQL APIs using OWASP ZAP daemon API. Detects injection flaws, broken auth, and CORS misconfigurations with detailed remediation steps.

Installation

Method 1, Agent Skill Exchange

Install from the marketplace listing: https://agentskillexchange.com/skills/owasp-zap-api-security-tester/

Method 2, Git clone

git clone https://github.com/agentskillexchange/skills.git && cd skills/skills/owasp-zap-api-security-tester

Method 3, Download ZIP

Download the repository ZIP and extract skills/owasp-zap-api-security-tester.

Method 4, Manual copy

Copy this skill folder into your local skills directory, then reload your agent tooling.

Method 5, Fork and sync

Fork the repository if you want to maintain local edits while syncing upstream changes.

Source

Agent Skill Exchange