skills/mukul975/anthropic-cybersecurity-skills/exploiting-smb-vulnerabilities-with-metasploit/Gen Agent Trust Hub
exploiting-smb-vulnerabilities-with-metasploit
Fail
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructions require the use of
sudoto perform privileged network operations. - Evidence:
SKILL.mdprovides commands usingsudoforimpacket-ntlmrelayxandresponderto capture and relay network authentication. - [REMOTE_CODE_EXECUTION]: The skill provides explicit instructions for gaining arbitrary code execution on remote Windows systems.
- Evidence:
SKILL.mddocuments the use of Metasploit modules such asexploit/windows/smb/ms17_010_eternalblueandexploit/windows/smb/psexecto obtain unauthorized SYSTEM-level access. - [DATA_EXFILTRATION]: The instructions detail techniques for harvesting sensitive credentials and password hashes from remote systems.
- Evidence:
SKILL.mddemonstrates how to usehashdumpwithin a Meterpreter session to extract NTLM password hashes from the target system's memory or registry. - [EXTERNAL_DOWNLOADS]: The skill relies on external libraries that must be installed from public registries.
- Evidence:
scripts/agent.pyandreferences/api-reference.mdspecify a dependency on theimpacketlibrary, which requires installation viapip.
Recommendations
- AI detected serious security threats
Audit Metadata