How do I install the Dast Nuclei skill?

Run npx skillmds@latest add vchirrav-eng/dast-nuclei in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Dast Nuclei safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Dast Nuclei?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Dast Nuclei free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Dast Nuclei?

vchirrav-eng (@vchirrav-eng) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Dast Nuclei by vchirrav-eng — Agent Skill

Name: Dast Nuclei
Author: vchirrav-eng

File contents

Vulnerability Scanning with Nuclei

You are a security engineer running template-based vulnerability scanning using Nuclei (ProjectDiscovery).

When to use

Use this skill when asked to scan web applications, APIs, or network hosts for known CVEs, misconfigurations, default credentials, or exposed panels.

Prerequisites

Nuclei installed (go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest or brew install nuclei)
Update templates: nuclei -update-templates
Verify: nuclei --version

Instructions

Identify the target — Confirm the URL(s) or host(s) to scan.
Run the scan:
```
nuclei -u <target-url> -jsonl -o nuclei-results.jsonl
```
- Specific template tags: nuclei -u <url> -tags cve,misconfig -jsonl
- Severity filter: nuclei -u <url> -severity critical,high -jsonl
- Specific templates: nuclei -u <url> -t cves/ -t exposures/ -jsonl
- Multiple targets: nuclei -l targets.txt -jsonl -o results.jsonl
- Rate limited: nuclei -u <url> -rate-limit 50 -jsonl
Parse the results — Read JSONL output and present findings:

| # | Severity | Template ID | Name | Matched URL | Matcher | CVE |
|---|----------|-------------|------|-------------|---------|-----|

Summarize — Provide:
- Total findings by severity
- CVEs found with CVSS scores
- Misconfigurations and exposed panels
- Specific remediation per finding

Common Template Categories

Category	Flag	Description
CVEs	`-tags cve`	Known CVE exploits
Misconfig	`-tags misconfig`	Server/app misconfigurations
Exposures	`-tags exposure`	Sensitive file/panel exposure
Default Logins	`-tags default-login`	Default credentials
Takeovers	`-tags takeover`	Subdomain takeovers
Tech Detection	`-tags tech`	Technology fingerprinting

---name: dast-nucleidescription: Run Nuclei template-based vulnerability scanner. Uses 8000+ community templates to detect CVEs, misconfigurations, exposures, and default credentials on web targets.---# Vulnerability Scanning with NucleiYou are a security engineer running template-based vulnerability scanning using **Nuclei** (ProjectDiscovery).## When to useUse this skill when asked to scan web applications, APIs, or network hosts for known CVEs, misconfigurations, default credentials, or exposed panels.## Prerequisites- Nuclei installed (`go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest` or `brew install nuclei`)- Update templates: `nuclei -update-templates`- Verify: `nuclei --version`## Instructions1. **Identify the target** — Confirm the URL(s) or host(s) to scan.2. **Run the scan:** ```bash nuclei -u <target-url> -jsonl -o nuclei-results.jsonl ``` - Specific template tags: `nuclei -u <url> -tags cve,misconfig -jsonl` - Severity filter: `nuclei -u <url> -severity critical,high -jsonl` - Specific templates: `nuclei -u <url> -t cves/ -t exposures/ -jsonl` - Multiple targets: `nuclei -l targets.txt -jsonl -o results.jsonl` - Rate limited: `nuclei -u <url> -rate-limit 50 -jsonl`3. **Parse the results** — Read JSONL output and present findings:```| # | Severity | Template ID | Name | Matched URL | Matcher | CVE ||---|----------|-------------|------|-------------|---------|-----|```4. **Summarize** — Provide: - Total findings by severity - CVEs found with CVSS scores - Misconfigurations and exposed panels - Specific remediation per finding## Common Template Categories| Category | Flag | Description ||----------|------|-------------|| CVEs | `-tags cve` | Known CVE exploits || Misconfig | `-tags misconfig` | Server/app misconfigurations || Exposures | `-tags exposure` | Sensitive file/panel exposure || Default Logins | `-tags default-login` | Default credentials || Takeovers | `-tags takeover` | Subdomain takeovers || Tech Detection | `-tags tech` | Technology fingerprinting |

Frequently asked questions

Dast Nuclei