dast-scanning

BENIGN for purpose-capability alignment and install provenance, but HIGH RISK operationally because it equips an AI agent to perform offensive web security scanning, including authenticated scans, against network targets. No clear malware or credential-harvesting behavior is present; the main concerns are offensive capability, mutable image tags, and credential exposure to security tools.