nuclei-scanner
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Nuclei binary and templates from ProjectDiscovery's official GitHub repository.
- Fetches release archives and checksums from
github.com/projectdiscovery/nuclei/releases. - Uses
go installfor the packagegithub.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest. - Updates templates using the built-in
nuclei -update-templatescommand which connects to ProjectDiscovery infrastructure. - [COMMAND_EXECUTION]: The skill demonstrates various shell commands to run the security scanner.
- Examples include
nuclei -u <target>,unzip, andsha256sumfor installation and verification. - Provides a Python wrapper using
subprocess.runto execute the localnucleibinary. - Includes a GitHub Action workflow using the official
projectdiscovery/nuclei-action@v3. - [SAFE_PRACTICE]: The instructions explicitly emphasize obtaining authorization before scanning targets and recommend rate-limiting to avoid service disruption.
Audit Metadata