nuclei

SUSPICIOUS: the skill is internally coherent as a Nuclei reference, but it gives an AI agent high-risk offensive scanning capability against arbitrary targets. Install provenance is mostly same-org/official, so the main concern is the disproportionate real-world security impact and outbound scanning/OAST behavior, not disguised malware.