Metasploit Framework

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit how-to for offensive operations (exploitation, reverse shells, Meterpreter post-exploitation, credential harvesting, persistence, and evasion), and therefore contains high-risk instructions that enable backdoors, data exfiltration, and credential theft if used without proper authorization.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill fetches and then executes a remote installer script at runtime via curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall followed by ./msfinstall, which runs remote code required for setup.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running sudo commands that start services and initialize system databases on the host (e.g., "sudo systemctl start postgresql" and "sudo msfdb init"), which requests elevated privileges and modifies the machine state.