OpenAgentSkillRegistry
ResolveSkillsTasksPacksCompare
Star200+Submit Skill
Star200+
Skills/security/Nuclei

Nuclei

STRONG · 89
Community indexed

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Downloads0
Stars29.2K
Version1.0.0
Quality100/100 · Excellent
Trust89/100 · Review then install
Audit93/100 · Safe to try

Supply asset profile

Coding and developer agents

Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills.

Browse track

Scenario

Coding agents

I need a coding agent that can understand a repository, edit code, and review pull requests.

Agent fit

Claude Code + CLI + Codex

Codex, Claude Code, Cursor, CLI, or custom agents.

Install

Ready

npx skills add projectdiscovery/nuclei

Maintenance

active

1mo since push

Risk

Safe to try

No major risk signals from available metadata

GitHub quality

29K

100/100 quality · 92/100 trust

Coverage tags

CodingCoding agentssecurityscannerattack-surface

Review notes

No major risk signals from available metadata

Agent adoption scorecard

Trust, audit, and install readiness at a glance

These scores combine public repository metadata, OpenAgentSkill review signals, maintenance freshness, and install readiness. They are a shortlist signal, not a replacement for human review.

Quality

Excellent
100

High-confidence pick with strong adoption and healthy maintenance signals.

Trust

Review then install
89

Good shortlist signal, but the agent should review audit notes, install policy, and outcome evidence before running it.

Audit

Safe to try
93

Install readiness, security metadata, maintenance, and adoption risk.

Trust Score v5

Agent install candidate

Use as the primary candidate after human or sandbox review.

GoSecurityCodexClaude CodeCursor

Stars

29K GitHub stars

Repo activity

29K stars, 3.5K forks

Maintenance

1mo since push

License

MIT

Install

npx skills add projectdiscovery/nuclei

Install safety

standard package or runtime install path

Permission surface

filesystem or document access

Agent outcomes

No agent outcome data yet

Docs

Strong README/SKILL.md context

Risk summary

Low metadata risk

  • No major trust warnings detected from available metadata

Install readiness

Install path available

  • Install path is available
  • Repository evidence is available
  • License is declared
  • No Agent Proven outcome evidence yet

Agent-readable metadata

Machine-readable decision data for this skill.

Use this block or the embedded JSON to decide whether an agent should install this skill, choose an alternative, or ask for human review first.

Open JSON

Suited tasks

  • Security and compliance workflows
  • Claude Code teams
  • teams that value GitHub adoption signals
  • Inspect risky files

Suited agents

GoSecurityCodexClaude CodeCursorOpenAgentSkill CLICLI

Install decision

Command
npx skills add projectdiscovery/nuclei
Policy
allow
Human review
no

Trust and risk

Trust
89/100
Audit
93/100
Risk level
Safe to try

Outcome loop

Endpoint
/api/agent/outcome
Event ID
resolve
Outcomes
5

Install command

npx skills add projectdiscovery/nuclei
Public auditEval reportResolve APIInstall handoff

Do not use when

  • teams that need a vendor-supported SLA
  • high-compliance environments without internal security review
  • No major risk signals from current metadata
  • No major trust warnings detected from available metadata
  • Production credentials, payments, or irreversible account changes without explicit human review

Alternative

Maigret

32.9K stars

npx skills add soxoj/maigret

Alternative

Infisical

27.4K stars

npx skills add Infisical/infisical

Alternative

Wazuh

16.3K stars

npx skills add wazuh/wazuh

Alternative

Zaproxy

15.3K stars

npx skills add zaproxy/zaproxy

Agent safety v2

85/100 · Safe to install with normal review

Verifiedallow

Strong metadata, audit, install, and review signals. Suitable for agent shortlists after normal workspace review.

Allow agent install in a sandbox or low-risk workspace, then promote after one successful narrow task.

Resolve via API

medium

Network access

Skill likely fetches remote pages, APIs, repositories, or external services.

medium

Filesystem access

Skill may read or write project files, documents, generated artifacts, or local workspace state.

Install targets

Install this skill in your agent workflow

Copy the registry command or an agent-specific install prompt for Codex, Claude Code, and Cursor.

skill install

OpenAgentSkill CLI

Use the registry command when your workflow supports the OpenAgentSkill installer.

$ npx skills add projectdiscovery/nuclei

Agent resolve plan

Let an agent verify fit before installing.

The Resolve API returns the selected skill, alternatives, safety policy, audit notes, install target, and copy-paste prompt an agent can follow without scraping this page.

Open text plan

Resolve JSON

/api/agent/resolve?task=Use%20Nuclei%20for%20an%20agent%20workflow&agent=codex&max_risk=medium

Resolve text

/api/agent/resolve?task=Use%20Nuclei%20for%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text

Install handoff

/api/skills/projectdiscovery-nuclei/install

Agent should check

  • Task fit and alternatives from Resolve API.
  • Audit score, trust score, and safety policy warnings.
  • Install target compatibility for Codex, Claude Code, Cursor, or CLI.

Copy prompt

Task: Use Nuclei in this workspace.
Resolve first: https://www.openagentskill.com/api/agent/resolve?task=Use%20Nuclei%20for%20an%20agent%20workflow&agent=codex&max_risk=medium
Review install handoff: https://www.openagentskill.com/api/skills/projectdiscovery-nuclei/install
Install command: npx skills add projectdiscovery/nuclei
Before running it, summarize audit warnings, required permissions, and the fallback skill if install is risky.

Agent handoff

Give an agent the install path, not another directory page.

Use the public install endpoint to fetch the command, safety checklist, target prompts, and canonical links for this skill.

Open install API

Install handoff

/api/skills/projectdiscovery-nuclei/install

LLM text format

/api/skills/projectdiscovery-nuclei/install?format=text

Find alternatives

/api/skills/search?q=Nuclei&limit=3

Agent prompt

Use Nuclei for this task. Review https://www.openagentskill.com/api/skills/projectdiscovery-nuclei/install, then install with: npx skills add projectdiscovery/nuclei

Registry metadata

Agent-readable profile for automatic skill selection.

This page exposes the same decision, trust, audit, use-case, and install signals through the Registry API, so agents can rank this skill without scraping the UI.

Open manifest

Manifest

/api/registry/manifest/projectdiscovery-nuclei

LLM text

/api/registry/manifest/projectdiscovery-nuclei?format=text

Install alias

/api/registry/install/projectdiscovery-nuclei

Recommend

/api/registry/recommend?task=Use%20Nuclei%20in%20an%20agent%20workflow&limit=3

Agent fit

100/100

Security and compliance

Use-case tags

Security and complianceCoding agentsRAG and knowledge

Platforms

Go, Security, Claude Code

Audit report

Safe to try · 93/100

Review install readiness, maintenance, trust, quality, and metadata warnings before adding this skill to an agent workflow.

View audit reportView eval report

Agent decision cockpit

Primary pick for Security and compliance

Use this as a leading candidate, then validate the README and install path in your own agent stack.

100
Readiness
Adopt
Stage

Role in stack

Primary pick

Primary fit

Security and compliance

Trust label

Production-ready

Install path

Command ready

Use when

  • Security and compliance workflows
  • Claude Code teams
  • teams that value GitHub adoption signals

Evidence

  • 29,159 GitHub stars
  • recent repository activity
  • install command or GitHub repo available
  • 100/100 quality profile
  • 223 OpenAgentSkill engagement events

Review first

  • No major risk signals from current metadata

Implementation path

  1. 1Install it in a sandbox agent and run one Security and compliance task end to end.
  2. 2Compare output quality, latency, and failure behavior against at least one alternative.
  3. 3Promote it into production only after reviewing repository permissions, license, and maintenance signals.

Trust profile

Review then install

Good shortlist signal, but the agent should review audit notes, install policy, and outcome evidence before running it.

89
Trust score

GitHub adoption

PASS

29K GitHub stars

Stars/forks activity

PASS

29K stars, 3.5K forks; issue activity unavailable in current metadata

Recent maintenance

PASS

1mo since push

License clarity

PASS

MIT

Good signals

  • Manually verified listing
  • AI review approved
  • Install path is available
  • Repository evidence is available
  • Recently maintained repository
  • Large GitHub adoption signal
  • Install command has no obvious high-risk pattern
  • OpenAgentSkill usage activity detected
  • Outcome loop is ready but needs first real agent run

Review before install

  • No real agent outcome reports yet
  • Human review required before unattended installation

Recommended action

Use as the primary candidate after human or sandbox review.

Quality profile

Excellent candidate for agent workflows

High-confidence pick with strong adoption and healthy maintenance signals.

100
GitHub stars
29K
Freshness
1mo ago
Install ready
Yes
License
MIT

Workflow fit

Use this skill in these scenarios

Reduce risk

Security and compliance

I need my agent to scan a project for security risks and summarize what needs attention.

Build and ship code

Coding agents

I need a coding agent that can understand a repository, edit code, and review pull requests.

Search private knowledge

RAG and knowledge

I need my agent to build a RAG workflow over documents and retrieve reliable context.

Workflow fit

Add it to a complete workflow

Turn skills into distribution

Content growth agent

A workflow for turning newly indexed skills into SEO briefs, social drafts, comparison pages, and reusable publishing workflows.

Inspect, patch, and verify code

Coding review agent

A workflow for software agents that inspect repositories, review pull requests, generate tests, and turn findings into shippable patches.

Ingest, retrieve, and cite

RAG knowledge base

A workflow for document-heavy agents that ingest files, create searchable knowledge, retrieve relevant context, and answer with grounded sources.

Alternative shortlist

Compare before you install

Similar skills in this category, ranked with the same readiness and quality signals.

Compare all

Maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

Adopt
Ready100
Quality100
Stars32.9K

Infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

Adopt
Ready100
Quality100
Stars27.4K

Wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Adopt
Ready100
Quality100
Stars16.3K

Zaproxy

The ZAP by Checkmarx Core project

Adopt
Ready100
Quality100
Stars15.3K

Overview

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Imported by the skill-only GitHub discovery pipeline because it matches agent skill, automation, domain workflow, RAG, document-processing, data, finance, security, or developer-tool signals. Protocol-server projects are excluded from automated imports.

Platform Compatibility

goFULL
securityFULL

Technical Details

Version
1.0.0
License
MIT
Last Updated
6/14/2026
Published
6/6/2026

Frameworks & Tools

GoSecurity

Decision snapshot

Primary pick

100
Ready
Adopt
Stage

29,159 GitHub stars

Audit snapshot

Install review

Install and adoption review

93
Safe to try
Security
89/100
Maintenance
88/100
Install
92/100
Open full auditOpen eval report

Agent-proven evidence

Agent Proven evidence

Outcome reports after resolve, review, install, and one narrow run.

0
Proven
Needs first agent runAuto-install: review firstLast: Unknown
Success rate
—
Recent failure
—
Outcomes
0
Output quality
—
Failed
0
Not relevant
0
Installs
0
Risk blocked
0
Setup needed
0
Production
0

No agent outcome data yet. The first agent run can report success, setup needs, risk blocks, failure, or not-relevant through /api/agent/outcome.

Agent-Proven rankingOutcome contract

Install

Add to agent workflow

Free and open source. Review the audit before production use.

Compare AlternativesAuto-resolve PlanView on GitHubDocumentation

Growth loop

Share kit

X

Scenario-led draft for Nuclei, ready for a manual X post.

Curator note
A lot of agents don't need a bigger prompt. They need fresher context.

Nuclei feels like a recent-web radar for Codex, Claude Code, Cursor, and research agents.

29.2K stars

https://www.openagentskill.com/skills/projectdiscovery-nuclei?ref=x
#AIAgents
Open X draft
Optional reply with install command
Listing + install path for Nuclei:
https://www.openagentskill.com/skills/projectdiscovery-nuclei?ref=x

Install: npx skills add projectdiscovery/nuclei
Open reply draft

Listing source

Community indexed

Claimable

This listing was indexed from public sources and is not marked official until a maintainer claim is approved.

Creator
projectdiscovery
Source
projectdiscovery/nuclei
Indexed by
OpenAgentSkill community index

Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals.

Claim this skill

Owner claim

Claim this skill listing

This community indexed listing is attributed to projectdiscovery but is not marked official yet. Claim it to add a verified owner signal and make future launch, install, and audit updates easier to trust.

Creator backlink kit

Add the evidence badges to your README

Show the canonical listing, current trust and audit signals, and real Agent Proven evidence where developers evaluate the repository.

[![Listed on OpenAgentSkill](https://www.openagentskill.com/api/badge/projectdiscovery-nuclei?metric=listed&label=Listed)](https://www.openagentskill.com/skills/projectdiscovery-nuclei)
[![OpenAgentSkill Trust](https://www.openagentskill.com/api/badge/projectdiscovery-nuclei?metric=trust&label=Trust)](https://www.openagentskill.com/skills/projectdiscovery-nuclei)
[![OpenAgentSkill Audit](https://www.openagentskill.com/api/badge/projectdiscovery-nuclei?metric=audit&label=Audit)](https://www.openagentskill.com/skills/projectdiscovery-nuclei/audit)
[![Agent Proven](https://www.openagentskill.com/api/badge/projectdiscovery-nuclei?metric=proven&label=Agent%20Proven)](https://www.openagentskill.com/skills/projectdiscovery-nuclei)
Preview badge Open audit Creator Kit

Author

P

projectdiscovery✓

@projectdiscovery

Tags

securityscannerattack-surfacecve-scannerdasthacktoberfestnuclei-enginesecurity-scannersubdomain-takeovervulnerability-assessment

Platform Fit

Claude Code

Health Signals

GitHub stars
29.2K
Quality score
74/100
Last GitHub push
Jun 13, 2026
Framework hints
2
OpenAgentSkill views
14
Install copies
0
Outbound clicks
1

Community Signal

Share whether this skill looks useful for your agent workflow. Aggregated feedback improves rankings over time.

Trust & Safety

Review then install

89
  • GitHub adoption29K GitHub starsPASS
  • Stars/forks activity29K stars, 3.5K forks; issue activity unavailable in current metadataPASS
  • Recent maintenance1mo since pushPASS
  • License clarityMITPASS
  • README/SKILL.md completenessMetadata includes enough usage and workflow contextPASS
  • Dependency/runtime riskno major dependency risk hints in public metadataPASS

Related Skills

Maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

32.9K stars · 0 installs

Infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

27.4K stars · 0 installs

Wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

16.3K stars · 0 installs

Zaproxy

The ZAP by Checkmarx Core project

15.3K stars · 0 installs
OpenAgentSkill

The skill layer for AI agents: discover, compare, audit, and install reusable capabilities across Codex, Claude Code, Cursor, and agent runtimes.

GitHubX

Explore

SkillsAgent SkillsWhat Is an Agent Skill?AI Agent SkillsTasksInstallable PacksBest SkillsTrendingWorkflow RecipesUse CasesAgentsAgent Entry

Trust

CompareSafety GateSkills RegistryRankingsOutcomesAuditsOfficialWeekly ReportsMonthly IndexState of Agent Skillsvs skills.shAgentSkills.io Alternative

Build

DocsAbout OpenAgentSkillAPIllms.txtOpenAPICLICreator KitX Growth KitSubmitBlogGuidesActivity
OpenAgentSkill Registry
PrivacyBuilt for agent-native discovery