nuclei_scan

Run nuclei scans and parse JSONL output into structured vulnerability findings.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/ProwlrBot/prowlrbot --skill nuclei-scan-prowlrbot
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: nuclei_scan
Source: https://github.com/ProwlrBot/prowlrbot/tree/main/src/prowlrbot/ext/skills/nuclei_scan
Command: npx skills add https://github.com/ProwlrBot/prowlrbot --skill nuclei-scan-prowlrbot

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates the discovery of security vulnerabilities on a target by running nuclei and returning structured findings.

Core Features & Use Cases

  • Automated vulnerability scans across web apps, APIs, and hosts.
  • Structured findings including title, template_id, severity, matched_url, and extracted_data.
  • Easy integration with CI workflows and automated security monitoring.

Quick Start

Provide a target URL and optional tags or severity levels to run a nuclei vulnerability scan and return structured findings.

Frequently Asked Questions about nuclei_scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate vulnerability scans on a target URL and get structured findings?

To automate vulnerability scans, you provide a target URL and optionally specify tags or severity levels. The scan runs and returns structured findings including title, template_id, severity, matched_url, and extracted_data for quick triage.

Can I filter nuclei vulnerability scan results by severity or tags?

Yes, you can filter vulnerability scan results by providing optional tags and severity levels. This filters the nuclei scan output, returning only the structured findings that match your specified severity and tag criteria.

How do I integrate automated security scans into a CI workflow?

You can integrate automated security scans into a CI workflow by running the scan against your web apps, APIs, or hosts. The scan returns structured JSONL findings, enabling automated triage and continuous monitoring within your pipeline.

What types of targets are supported for automated security vulnerability scanning?

Automated security vulnerability scanning supports web applications, APIs, and host systems. By running nuclei against these targets, it identifies security vulnerabilities and parses the output into structured findings for quick triage and monitoring.

Does the vulnerability scan support custom templates?

Yes, the vulnerability scan supports a custom templates path. You can supply this path to run nuclei with your specific templates, returning parsed structured findings based on your customized scanning rules and criteria.

What data is included in structured vulnerability scan findings?

Structured vulnerability scan findings include the title, template_id, severity, matched_url, and extracted_data. This parsed output from nuclei's JSONL format enables quick triage and easy integration with automated security monitoring systems.