Nuclei Analysis Skill

Parses raw Nuclei scan output and generates prioritized, actionable bug bounty reports.

When to Use

Use this skill when:

• A Nuclei scan has completed and you want to turn raw output into a structured report
• You need to separate signal from noise in large scans
• You want severity-prioritized findings with business impact context

Usage

python3 scripts/nuclei_analyzer.py /path/to/nuclei-output.txt
python3 scripts/nuclei_analyzer.py /path/to/nuclei-output.txt --min-severity high --output report.md

Workflow

When user says "analyze nuclei results", "review scan", or similar:

1. Read the nuclei output file
2. Parse and categorize by severity and template type
3. Reduce noise (filter common false positives)
4. Enrich high/critical findings with business context
5. Generate a Markdown report

Severity Levels

Nuclei severities (highest to lowest):

• critical — Immediate action required
• high — Significant risk, exploit likely
• medium — Moderate risk, requires context
• low — Minor risk, informational
• info — Informational, usually noise

Noise Reduction

Filter out common false positives:

• Generic 403 Forbidden (without further context)
• Self-signed certificates (info only)
• Leaking server/version headers without actual exploit
• Template matches on redirect pages

Output

Always produces:

• Summary table of all findings by severity
• Detailed section for High+ severity findings
• Attack scenario for critical/high issues
• Steps to reproduce for actionable findings

Report saved to: reports/nuclei-analysis/-.md

Example Prompts

• "Analyze nuclei results for example.com"
• "Review scan findings and prioritize"
• "Turn nuclei.txt into a bug bounty report"

Requirements

• Python 3.7+
• Nuclei installed and in PATH
• nuclei output in text format (newline-delimited JSON also supported)