nuclei-template-writer
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a formatting and logic guide for generating YAML templates for the Nuclei security scanner. It includes comprehensive reference files for vulnerability classification, matcher selection, and authentication strategies.
- [SAFE]: Instructions for handling authentication (
references/auth-strategies.md) emphasize safe practices, such as using variables ({{token}}) rather than hardcoding sensitive credentials. It explicitly instructs the agent to mark headers for customization and never to embed actual secrets in the output. - [SAFE]: The command execution examples provided in
SKILL.mdandreferences/auth-strategies.mdare standard usage patterns for thenucleiCLI tool. They are presented as instructional documentation for the user, not as commands for the agent to execute autonomously. - [SAFE]: Data processing logic focuses on parsing user-supplied HTTP requests/responses to extract technical parameters (methods, paths, headers) for template generation. There are no patterns suggesting data exfiltration or unauthorized file access.
- [SAFE]: All external resources mentioned, including those from the vendor 'rifteo', are documented as legitimate instructional content related to the primary purpose of the skill.
Audit Metadata