nuclei-template-scan

Run curated Nuclei templates against HTTP/HTTPS targets and emit findings.

Updated May 7, 2026
One-click install
npx skills add https://github.com/gongzeq/VAPT3 --skill nuclei-template-scan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: nuclei-template-scan
Source: https://github.com/gongzeq/VAPT3/tree/main/secbot/skills/nuclei-template-scan
Command: npx skills add https://github.com/gongzeq/VAPT3 --skill nuclei-template-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates the detection of web vulnerabilities by running a curated set of Nuclei templates against a list of HTTP/HTTPS targets, producing structured findings and CMDB writes.

Core Features & Use Cases

  • Curated template execution: applies only selected templates to reduce noise and focus on high-value findings.
  • CMDB integration: emits findings as upserted vulnerability records for centralized asset risk management.
  • Flexible sourcing: supports custom POC templates under secbot/resource/poc/ and optional built-in templates.

Quick Start

Provide a list of HTTP/HTTPS targets and the skill will run curated Nuclei templates and return structured findings and CMDB writes.

Frequently Asked Questions about nuclei-template-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate vulnerability scanning for multiple HTTP targets?

Automate vulnerability scanning by providing a list of HTTP/HTTPS targets to run curated Nuclei templates against. It returns structured findings and upserts vulnerability records into a CMDB for centralized asset risk management.

Can I load custom POC templates for Nuclei vulnerability scans?

Yes, you can load custom POC templates for Nuclei vulnerability scans by placing them under the secbot/resource/poc/ directory. Optional built-in template selections are also supported alongside your custom templates.

Does this vulnerability scanner support filtering templates by severity and tags?

Yes, this vulnerability scanner enforces template severity and tag filters to reduce noise and focus on high-value findings. This ensures only selected templates apply to your web services, APIs, and exposed assets.

How does template-based vulnerability scanning integrate with a CMDB?

Template-based vulnerability scanning integrates with a CMDB by emitting structured findings as upserted vulnerability records. This automatically updates centralized asset risk management data after each scan completes.

What types of web assets are supported for targeted Nuclei template scanning?

Targeted Nuclei template scanning supports web services, APIs, and exposed assets. You simply provide a list of HTTP/HTTPS targets for the automated scanning process to evaluate.