msf-oneshot

Fail

Audited by Socket on Sep 23, 2026

3 alerts found:

Securityx2Malware
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its capabilities are internally consistent with its stated purpose, but that purpose is to equip an AI agent with offensive exploitation and post-exploitation operations against remote systems. No strong malware or covert exfiltration from the skill itself, yet the enabled behavior is inherently dangerous and disproportionate for general agent use.

Confidence: 96%Severity: 94%
SecurityMEDIUM
references/meterpreter-operations.md

该文件是 Metasploit 后渗透与会话管理操作文档,不包含直接执行恶意行为的程序代码或明确的数据外传逻辑。其示例覆盖提权、凭据提取、端口转发、SOCKS 代理、Pass-the-Hash、远程执行和备用回连,若用于未授权目标将具有较高攻击风险。应仅在明确授权的测试环境中使用,并限制网络范围、凭据访问和持久化回连能力。

Confidence: 98%Severity: 70%
MalwareHIGH
evals/evals.json

This JSON fragment is not legitimate library/runtime code; it is an actionable offensive instruction specification for Metasploit-based exploitation and post-exploitation. It provides direct guidance for running known exploit tooling, generating reverse-shell executables, and achieving OS command execution via database credential abuse. If incorporated into a production workflow, it would meaningfully enable unauthorized compromise and remote shell access.

Confidence: 88%Severity: 97%
Audit Metadata
Analyzed At
Sep 23, 2026, 04:29 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fmsf-oneshot%2F@0fd3ebadc4623d681f443ff86fa20b80c262596277f73960ee6aa6a32cf97caa