pentest-metasploit

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document contains explicit, actionable offensive guidance (exploit configuration and execution, payloads/C2 callbacks, credential dumping, persistence, lateral movement, and exfiltration) that can be directly abused to perform backdoors, credential theft, and data exfiltration despite being framed for “authorized” testing.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The CI/CD template contains a runtime curl-and-pipe-to-bash command that fetches and executes remote code from https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh (tfsec installer), which will run at job runtime and thus is an external dependency that executes remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs using sudo (e.g., "sudo systemctl start postgresql"), editing system files (e.g., /etc/proxychains4.conf), and performing privilege escalation, persistence, and security-bypass actions, all of which push the agent to obtain elevated privileges and modify the host system state.