tools-nuclei

SUSPICIOUS: the footprint matches its stated purpose, and install sources appear official or distro-backed, so this is not malware or credential harvesting. However, it is an offensive security skill that enables active vuln scanning against live hosts, uses an unpinned installer path, and references another skill, making it high security risk despite good internal coherence.