nuclei

Scan web applications and networks for known vulnerabilities using nuclei templates.

15|1|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/AeonDave/malskill --skill nuclei-aeondave
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: nuclei
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/vuln-scanners/nuclei
Command: npx skills add https://github.com/AeonDave/malskill --skill nuclei-aeondave

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the process of scanning web applications, networks, and infrastructure for known vulnerabilities, misconfigurations, and exposed information.

Core Features & Use Cases

  • Template-based Scanning: Utilizes a vast library of community-contributed templates to detect a wide range of security issues.
  • Targeted Scans: Allows scanning specific URLs, lists of URLs, or by template categories and severity levels.
  • Use Case: When asked to check a new web server for common CVEs or exposed admin panels, this Skill can quickly perform an automated assessment.

Quick Start

Use the nuclei skill to scan the URL https://example.com for known vulnerabilities.

Frequently Asked Questions about nuclei

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate vulnerability scanning for known CVEs on a web application?

Automated vulnerability scanning for known CVEs uses template-based scanning against target URLs to detect security issues. It utilizes a comprehensive template library to quickly perform automated assessments of web servers and infrastructure for exposed panels and misconfigurations.

Does template-based scanning work for detecting default credentials and exposed admin panels?

Yes, template-based scanning detects default credentials and exposed admin panels by checking web applications and infrastructure against targeted templates. It scans for known security issues, misconfigurations, and exposed information across specified target URLs or IP addresses.

Do I need the nuclei CLI tool to run a misconfiguration scan on my network?

Yes, you need the nuclei CLI tool installed to execute a misconfiguration scan on your network. The Skill requires this command line tool to perform template-based vulnerability scanning against your specified target URLs or IP addresses.

What is the best way to scan a list of URLs for security misconfigurations?

The best way to scan a list of URLs for security misconfigurations is using a template-based vulnerability scanner. This method allows targeted scans by specific template categories and severity levels to identify exposed information and known vulnerabilities across infrastructure.

Can I scan specific infrastructure components for known vulnerabilities?

Yes, you can scan specific infrastructure components for known vulnerabilities by providing target URLs or IP addresses. The template-based scanning approach checks networks and web applications for CVEs, default credentials, and exposed panels using community-contributed templates.