The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructions facilitate the installation of the Nuclei scanner from the official GitHub repository of ProjectDiscovery and the download of community templates. It also references security tools like tfsec, Semgrep, and Bandit from well-known technology organizations.
[REMOTE_CODE_EXECUTION]: The CI/CD configuration template (assets/ci-config-template.yml) includes a command to download and execute an installation script for the tfsec tool from Aqua Security's official GitHub repository using a piped shell command (curl | bash). This operation targets a recognized and trusted security vendor.
[COMMAND_EXECUTION]: The skill's workflows involve executing the nuclei command-line tool for vulnerability scanning. Additionally, Python code snippets in references/authentication_patterns.md demonstrate the use of subprocess.run to invoke the scanner with dynamically generated authentication headers.
[NO_CODE]: Multiple scripts listed as 'Bundled Resources' in SKILL.md (e.g., scripts/nuclei_auth_scan.py, scripts/nuclei_bulk_scanner.sh, scripts/nuclei_report_generator.py) are not present in the provided file list. While their logic is partially documented in reference files, the absence of the physical script files limits the immediate usability of the described automated security workflows.

dast-nuclei