Metasploit Framework

SUSPICIOUS: internally coherent as a Metasploit skill and not obviously a credential-harvesting lure, but it equips an AI agent with explicit offensive security capabilities and real-world exploit workflows. The Rapid7 installer appears official, so the main risk is not supply-chain malware but the high-risk offensive scope and ability to compromise systems, harvest credentials, and maintain access.