The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Nuclei binary directly from ProjectDiscovery's official GitHub releases (github.com/projectdiscovery/nuclei). As ProjectDiscovery is a well-known security tool vendor, this is considered a safe and standard practice for this tool.
[COMMAND_EXECUTION]: The instructions involve executing the nuclei command and go install. These are necessary for the stated purpose of the skill (vulnerability scanning) and are performed by the user/agent to set up the tool.
[REMOTE_CODE_EXECUTION]: The skill demonstrates how to run Nuclei via a Python subprocess. This is a common pattern for automating security tools and does not involve executing untrusted remote code, as the execution is constrained to the local nuclei binary with user-provided arguments.
[CREDENTIALS_UNSAFE]: While the skill contains regex patterns for detecting leaked credentials (like sk_live_ or AKIA), these are used as detection logic within security templates and are not actual hardcoded secrets.

nuclei-scanner