Metasploit Framework
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Metasploit installation script from the official Rapid7 GitHub repository (raw.githubusercontent.com/rapid7/metasploit-omnibus).
- [REMOTE_CODE_EXECUTION]: Executes the downloaded installer script to set up the Metasploit Framework environment.
- [COMMAND_EXECUTION]: Provides instructions for running msfconsole and utilizing various exploitation, auxiliary, and post-exploitation modules.
- [PRIVILEGE_ESCALATION]: Uses administrative privileges (sudo) to manage the PostgreSQL database service and initialize the framework database.
- [INDIRECT_PROMPT_INJECTION]: The skill documents interactions with external target systems that may provide untrusted data during assessments.
- Ingestion points: Module outputs from network scanning and service enumeration in SKILL.md.
- Boundary markers: No specific delimiters or safety instructions provided for handling external tool output.
- Capability inventory: Extensive system manipulation capabilities including shell access, file transfers, and process migration (Meterpreter) across multiple phases in SKILL.md.
- Sanitization: Not applicable as the skill serves as a command reference for security professionals.
Audit Metadata