nuclei-scan

What this skill does

Uses ProjectDiscovery's Nuclei to perform template-based vulnerability scanning against a target URL or list of hosts. Updates templates to the latest version, applies severity filters, runs the scan, and parses the JSON output to summarize findings.

When to use

• When automatically detecting known vulnerability patterns (CVEs, default credentials, misconfigurations)
• When scanning multiple hosts quickly and in parallel
• When chaining subdomain-enum or port-scan results into vulnerability analysis
• When running automated security checks in a CI/CD pipeline

Prerequisites

• Nuclei installed:

  go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest
  

• Go 1.21 or higher installed
• Environment variable SECSKILL_TARGET or SECSKILL_TARGET_LIST set to the scan target