A utility to parse raw Nuclei vulnerability scan results, filter noise, and generate prioritized markdown reports.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install nuclei-analysis
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install nuclei-analysis using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Nuclei Analysis?
The Nuclei Analysis skill is designed to bridge the gap between automated security scanning and actionable remediation. Running vulnerability scans often produces high volumes of raw text or JSON data, which can be overwhelming to review manually. By integrating with Openclaw Skills, this tool automates the digestion of raw Nuclei logs, separating critical findings from common false positives.
With this utility, developers and security teams can immediately identify high-impact issues without wading through informational noise. It transforms unstructured scan logs into beautifully formatted Markdown reports, complete with severity tables and suggested remediation paths, optimizing your overall security workflow.
Nuclei Analysis Use Cases
- Post-scan automation to instantly convert raw text outputs into structured documentation.
- Noise reduction to ignore common false positives like generic 403 pages or standard redirects.
- Severity-based prioritization to focus development resources on high and critical impact vulnerabilities first.
- Bug bounty workflow acceleration by automatically generating clean markdown reports with clear reproduction steps.
How Nuclei Analysis Works
- Ingestion: The script reads the raw Nuclei output text file or newline-delimited JSON log.
- Parsing & Categorization: Findings are structured by template type and classified according to standard Nuclei severity levels (Critical down to Info).
- False Positive Filtering: Rules are applied to filter out generic status codes, standard self-signed certificates, and irrelevant redirects.
- Context Enrichment: High-severity issues are enriched with business impact and attack scenarios.
- Report Generation: A standardized Markdown report is generated and saved to the designated outputs folder.
Nuclei Analysis Setup
Ensure you have Python 3.7+ and Nuclei installed in your environment PATH. Install the script requirements and execute the tool using the following commands:
# Standard analysis of raw output
python3 scripts/nuclei_analyzer.py /path/to/nuclei-output.txt
# Filter by minimum severity and specify output file
python3 scripts/nuclei_analyzer.py /path/to/nuclei-output.txt --min-severity high --output report.md
Nuclei Analysis Data Schema & Taxonomy
The skill organizes scan outputs and processed data systematically:
| Directory / File | Description | Format |
|---|---|---|
reports/nuclei-analysis/ |
Target directory for all generated reports | Directory |
<target>-<date>.md |
Individual prioritized scan report | Markdown |
Report Structure
- Summary Table: Overview of finding counts categorized by severity.
- High+ Findings: Dedicated detailed sections for Critical and High vulnerabilities.
- Attack Scenario: Conceptual descriptions of exploit paths for severe bugs.
- Steps to Reproduce: Actionable technical steps to verify the vulnerability.
Nuclei Analysis Advanced Features
- Noise Filtering Engine: Built-in rules to automatically omit low-risk findings like version headers or generic 403 responses.
- Severity Thresholding: Custom CLI flags to define the minimum severity level to include in the generated reports.
- Flexible Input Formats: Supports both standard text logs and newline-delimited JSON (NDJSON) output from Nuclei.
- Seamless Integration: Easily triggered via natural language prompts within the broader platform environment utilizing Openclaw Skills.
SKILL.md
Loading
Related Openclaw Skills
Morning Briefing
An automated workflow that aggregates A-share market trends and RSS news into custom Markdown digests and WeChat push notifications.
Web Search
A versatile web search skill using DuckDuckGo to query web pages, news, images, and videos with highly flexible formatting and filtering options.
ImageCraft Editor
An AI-powered image editing application skill featuring StepFun API integration, a Flask backend, and a React frontend for high-quality photo restoration, portrait retouching, landscape grading, and style transfer.
Dcard Content Extractor
A stealth browser-based Dcard post scraper designed to bypass Cloudflare and extract rich textual and media content smoothly.
AI-Native Founder Playbook
A bilingual, vendor-neutral operating playbook designed to convert AI-native startup ideas into stage-appropriate strategic experiments and automated agent workflows.
Audio Transcribe
A local, privacy-first audio transcription skill that converts speech to text, subtitles (SRT), or JSON using OpenAI's Whisper model.
METADATA
Featured*
