nuclei-scanner

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill defines templates that match and extract real API/key patterns (e.g., sk_live_, AKIA, ghp_) and shows workflows and code that print scan findings, which would require the LLM/agent to handle and potentially output secret values verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill is “Nuclei Scanner”; at runtime it executes Nuclei against a user-supplied target (e.g., CI job projectdiscovery/nuclei-action with target: https://myapp.com), so outsider-authored free text is ingested only as HTTP response bodies/URLs from that target, which the workflow does not first select from any outsider-submitted feed/queue.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill fetches and executes remote code at runtime (go install github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest, curl https://github.com/projectdiscovery/nuclei/releases/latest/download/nuclei_linux_amd64.zip, and uses projectdiscovery/nuclei-action@main) which downloads and runs external binaries/actions without checksum verification.