Nuclei

Automate vulnerability scanning and misconfiguration detection with template-based Nuclei scans.

Updated Feb 11, 2026
One-click install
npx skills add https://github.com/zzw4257/security-skills --skill nuclei
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Nuclei
Source: https://github.com/zzw4257/security-skills/tree/main/skills/nuclei
Command: npx skills add https://github.com/zzw4257/security-skills --skill nuclei

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, git, go>=1.21, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the detection of vulnerabilities and misconfigurations in systems and applications using a fast, template-based approach.

Core Features & Use Cases

  • Vulnerability Scanning: Utilizes a vast library of community-contributed templates to identify known CVEs, security misconfigurations, and exposures across various protocols (HTTP, DNS, TCP, etc.).
  • Automation-Ready: Designed for seamless integration into CI/CD pipelines and automated security workflows.
  • Use Case: Quickly scan your web servers for critical vulnerabilities like Log4j or exposed administrative panels using pre-defined or custom Nuclei templates.

Quick Start

Use the nuclei skill to scan the target example.com for critical and high severity vulnerabilities.

Frequently Asked Questions about Nuclei

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate vulnerability scanning for web applications and network services?

Automate vulnerability scanning by using a template-based engine to detect known CVEs and security misconfigurations across web applications, network services, and cloud environments. It leverages community-contributed templates to identify exposures over protocols like HTTP, DNS, and TCP.

How does template-based scanning work for detecting known CVEs?

Template-based scanning works by matching targets against a vast library of community-contributed templates to identify known CVEs and security misconfigurations. You can use pre-defined or custom templates to quickly scan servers for critical vulnerabilities like Log4j or exposed administrative panels.

Do I need to install specific dependencies to run a template-based vulnerability scanner?

Yes, effective operation requires installing the Nuclei binary and updating templates. The environment must have curl, git, and go version 1.21 or higher installed to support the template-based vulnerability scanning and misconfiguration detection processes.

Can I integrate DAST vulnerability scanning into my CI/CD pipeline?

Yes, this template-based vulnerability scanner is automation-ready and designed for seamless integration into CI/CD pipelines and automated security workflows. It allows you to continuously scan web servers and network services for critical exposures during development.

What is the best way to scan my servers for critical security exposures and misconfigurations?

The best way to scan for security exposures is using a fast, template-based approach that targets critical and high severity vulnerabilities. By executing a scan against your target domain, the engine identifies misconfigurations and known CVEs using pre-defined templates.

When should I not use a template-based approach for vulnerability detection?

A template-based approach is limited to detecting known CVEs and predefined misconfigurations, meaning it cannot find novel or zero-day vulnerabilities outside its template library. You should anticipate updating templates regularly to maintain effective coverage against newly discovered security weaknesses.