Owasp Zap Automated Pen Testing Agent

Name: Owasp Zap Automated Pen Testing Agent
Author: agentskillexchange

ASecurity

Runs automated penetration tests using OWASP ZAP API with spider crawling, active scanning, and AJAX-aware testing. Generates SARIF and HTML reports with CWE-mapped findings for security review workflows.

36 stars
0 votes
0 copies
2 views
Added June 8, 2026

ai-agentsgodockertestinggitapisecurity

Works with

Security analysis

A100/100

Scanned June 8, 2026

npx -y skills add agentskillexchange/skills --skill owasp-zap-automated-pen-testing-agent --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Owasp Zap Automated Pen Testing Agent?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Owasp Zap Automated Pen Testing Agent

[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/agentskillexchange-owasp-zap-automated-pen-testing-agent/badge)](https://www.skillsdirectory.com/skills/agentskillexchange-owasp-zap-automated-pen-testing-agent)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
name: "OWASP ZAP Automated Pen Testing Agent"
slug: "owasp-zap-automated-pen-testing-agent"
description: "Runs automated penetration tests using OWASP ZAP API with spider crawling, active scanning, and AJAX-aware testing. Generates SARIF and HTML reports with CWE-mapped findings for security review workflows."
github_stars: 14991
verification: "security_reviewed"
source: "https://github.com/zaproxy/zaproxy"
category: "Security & Verification"
framework: "ChatGPT Agents"
tool_ecosystem:
  github_repo: "zaproxy/zaproxy"
  github_stars: 14991
---

# OWASP ZAP Automated Pen Testing Agent

Runs automated penetration tests using OWASP ZAP API with spider crawling, active scanning, and AJAX-aware testing. Generates SARIF and HTML reports with CWE-mapped findings for security review workflows.

## Installation

Requirements and caveats from upstream:
- ![Docker Live Release](https://github.com/zaproxy/zaproxy/actions/workflows/release-live-docker.yml/badge.svg)

Basic usage or getting-started notes:
- ![Integration Tests](https://github.com/zaproxy/zaproxy/actions/workflows/run-integration-tests.yml/badge.svg)

- Source: https://github.com/zaproxy/zaproxy
- Extracted from upstream docs: https://raw.githubusercontent.com/zaproxy/zaproxy/HEAD/README.md

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/owasp-zap-automated-pen-testing-agent/)