nuclei-scanner

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Nuclei binary and templates from ProjectDiscovery's official GitHub repository.
  • Fetches release archives and checksums from github.com/projectdiscovery/nuclei/releases.
  • Uses go install for the package github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest.
  • Updates templates using the built-in nuclei -update-templates command which connects to ProjectDiscovery infrastructure.
  • [COMMAND_EXECUTION]: The skill demonstrates various shell commands to run the security scanner.
  • Examples include nuclei -u <target>, unzip, and sha256sum for installation and verification.
  • Provides a Python wrapper using subprocess.run to execute the local nuclei binary.
  • Includes a GitHub Action workflow using the official projectdiscovery/nuclei-action@v3.
  • [SAFE_PRACTICE]: The instructions explicitly emphasize obtaining authorization before scanning targets and recommend rate-limiting to avoid service disruption.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 06:46 PM