القائمة
Nuclei scan using only `temlists/` as the template root (no bundled projectdiscovery/nuclei-templates); framework-routed matrix and phase-isolated tags (`safe-poc` / `exploit`).
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
| name | nuclei |
| description | Nuclei scan using only `temlists/` as the template root (no bundled projectdiscovery/nuclei-templates); framework-routed matrix and phase-isolated tags (`safe-poc` / `exploit`). |
| metadata | {"openclaw":{"emoji":"☢️","requires":{"bins":["nuclei"],"env":[]},"primaryEnv":null}} |
-l file of valid http(s):// URLs.framework_hint into temlists/<framework>/.-tags safe-poc, EXPLOIT defaults to -tags exploit.| Param | Description |
|---|---|
run_id | Required (same as pipeline) |
chunk_index | 1-based index matching manifest |
chunk_path | Alternative: manifest path e.g. chunks/chunk_0001.txt |
timeout | Per-chunk seconds (default 60; keep 20–40 typical) |
rate_limit | Nuclei -rl。建议传正整数；兼容 low/medium/high（会映射为 10/30/80），默认 50 |
tags / nuclei_tags | Override manifest tags |
framework_hint | Framework namespace hint: struts2, spring, thinkphp, jenkins, solr, elasticsearch, weblogic. Use the detected technology exactly. |
mode | scan or exploit (drives tag isolation) |
output_discovery_dir | Shared discovery dir, prefer clustered_targets.txt as list input |
Writes results/chunk_NNNN.jsonl and sets manifest chunk status to done or failed.
Build: pentest-skill-nuclei:latest via skills/docker-compose.yml (skill-nuclei). Image copies only temlists/; NUCLEI_TEMPLATES_DIR=/skill/temlists. No nuclei -update-templates / full community template tree in this skill.
Fast HTTP probing and lightweight fingerprinting using ProjectDiscovery httpx. Use for web recon with redirect-awareness and JSON output.
V5 样板 Micro-Skill：Pydantic 入参、micro_executor SDK、落盘 parsed.json、stderr S-06、stdout Agent 摘要 JSON（嵌入 raw_stdout）。
Build a basic understanding of the current project by scanning source code and available docs. Use when user asks for /init, project onboarding, quick repo familiarization, or initial architecture context.
Search the web using Baidu AI Search Engine (BDSE). Use for live information, documentation, or research topics.
Raw HTTP probing with curl. Use for custom method, headers and body requests in recon and validation.
Advanced web path scanner using multithreaded brute-force. Use for discovering hidden files, directories, and endpoints on web servers.