nuclei-scanner

SUSPICIOUS. The skill is internally coherent and uses official ProjectDiscovery distribution paths, so it does not look malicious or like credential harvesting. However, it gives an AI agent real vulnerability-scanning capability against network targets, including optional third-party OAST callbacks, which makes it high-risk security tooling despite otherwise legitimate provenance and proportional scope.