Orchestrates OWASP ZAP security scans via the ZAP API with automated spider, active scanner, and authentication sequence configuration. Generates compliance reports mapped to OWASP Top 10 and exports findings in SARIF and JUnit XML formats.
Installs into .claude/skills of the current project.
Are you the author of Zap Automated Security Scan Orchestrator?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/agentskillexchange-zap-automated-security-scan-orchestrator)
---
name: "ZAP Automated Security Scan Orchestrator"
slug: "zap-automated-security-scan-orchestrator"
description: "Orchestrates OWASP ZAP security scans via the ZAP API with automated spider, active scanner, and authentication sequence configuration. Generates compliance reports mapped to OWASP Top 10 and exports findings in SARIF and JUnit XML formats."
github_stars: 15007
verification: "security_reviewed"
source: "https://github.com/zaproxy/zaproxy"
author: "OWASP ZAP"
category: "Security & Verification"
framework: "Codex"
tool_ecosystem:
github_repo: "zaproxy/zaproxy"
github_stars: 15007
---
# ZAP Automated Security Scan Orchestrator
Orchestrates OWASP ZAP security scans via the ZAP API with automated spider, active scanner, and authentication sequence configuration. Generates compliance reports mapped to OWASP Top 10 and exports findings in SARIF and JUnit XML formats.
## Prerequisites
Java or Docker
## Installation
Requirements and caveats from upstream:
- 
Basic usage or getting-started notes:
- 
- Source: https://github.com/zaproxy/zaproxy
- Extracted from upstream docs: https://raw.githubusercontent.com/zaproxy/zaproxy/HEAD/README.md
## Documentation
- https://www.zaproxy.org/docs/
## Source
- [Agent Skill Exchange](https://agentskillexchange.com/skills/zap-automated-security-scan-orchestrator/)