Agent skill · security · aiskillstore
dast-nuclei
Fast, template-based vulnerability scanning using ProjectDiscovery's Nuclei with extensive community templates covering CVEs, OWASP Top 10, misconfigurations, and security issues across web applications, APIs, and infrastructure. Use when: (1) Performing rapid vulnerability scanning with automated CVE detection, (2) Testing for known vulnerabilities and security misconfigurations in web apps and APIs, (3) Running template-based security checks in CI/CD pipelines with customizable severity thresholds, (4) Creating custom security templates for organization-specific vulnerability patterns, (5) Scanning multiple targets efficiently with concurrent execution and rate limiting controls.
Why this skill is useful
Provides extensive community templates and specific commands for vulnerability scanning that the AI wouldn't reliably generate on its own.
What it needs
Requires docker, git, nuclei installed locally. About 8k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
DAST with Nuclei Overview Nuclei is a fast, template-based vulnerability scanner from ProjectDiscovery that uses YAML templates to detect security vulnerabilities, misconfigurations, and exposures across web applications, APIs, networks, and cloud infrastructure. With 7,000+ community templates covering CVEs, OWASP vulnerabilities, and custom checks, Nuclei provides efficient automated security testing with minimal false positives. Quick Start Installation Basic Vulnerability Scan Quick CVE Scan Core Workflow Workflow Checklist Progress: [ ] 1. Install Nuclei and update templates to latest version [ ] 2. Define target scope (URLs, domains, IP ranges) [ ] 3. Select appropriate templates based on target type and risk tolerance [ ] 4. Configure scan parameters (rate limiting, severity, concurrency) [ ] 5. Execute scan with proper authentication if needed [ ] 6. Review findings, filter false positives, and verify vulnerabilities [ ] 7. Map findings to OWASP/CWE frameworks [ ] 8. Generate security report with remediation guidance Work through each step systematically. Check off completed items. Step 1: Template Selection and Target Scoping Identify target applications and select relevant template categories: Template Categories: cve: Known CVE vulnerabilities (7000+ CVE templates) owasp: OWASP Top 10 vulnerabilities misconfig: Common security misconfigurations exposed-panels: Admin panels and login pages takeovers: Subdomain takeover vulnerabilities default-logins: Default credentials exposures: Sensitive file and data exposures tech: Technology detection and fingerprinting Target Scoping Best Practices: Create target list excluding third-party services Group targets by application type for focused scanning Define exclusions for sensitive endpoints (payment, logout, delete actions) Step 2: Configure Scan Parameters Set appropriate rate limiting and concurrency for target environment: Parameter Guidelines: rate-limit: Requests per second (50-150 typical, lower for product …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/dast-nuclei