tools-metasploit

Warn

Audited by Socket on Oct 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is internally coherent: its commands, network behavior, and package references match its stated purpose of driving Metasploit. However, that purpose is inherently high risk because it equips an AI agent to perform exploitation, run scanners, and manage reverse-shell/meterpreter sessions against targets. Install trust for the flagged package is acceptable via Kali apt, but the overall skill should be treated as a high-risk offensive-security capability, not malware.

Confidence: 91%Severity: 78%
Audit Metadata
Analyzed At
Oct 15, 2026, 10:31 AM
Package URL
pkg:socket/skills-sh/noorqureshi%2Fsecurity-skills%2Ftools-metasploit%2F@082f9220f3a4933c0763632ea7f284650b5ae7720c7d0b75d22c2fe4a041828e