nuclei_scan

What nuclei_scan does on Nyxstrike

AI agents invoke nuclei_scan to trigger actions in Nyxstrike. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why nuclei_scan is rated High

Nuclei is a widely recognized open-source vulnerability scanner that executes active probes against target systems to detect vulnerabilities. Even with an empty description, the tool name combined with the offensive security context of this server (penetration testing platform with sibling tools for payload generation, attack suites, and wireless cracking) strongly implies it runs active network scans against…

From the tool's definition Tool name 'nuclei_scan' on a penetration testing platform alongside tools like 'advanced_payload_generation', 'ai_generate_attack_suite', and 'aircrack_ng'. Nuclei is a well-known vulnerability scanning tool that actively probes targets.

The rule that runs nuclei_scan safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Nyxstrike, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For nuclei_scan, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "nuclei_scan": {
      "limits": [
        {
          "counter": "nuclei_scan_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about nuclei_scan