Metasploit Framework
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the Metasploit Framework installation script from the official Rapid7 GitHub repository.
- [COMMAND_EXECUTION]: Provides instructions for system service management and database initialization using administrative privileges.
- [REMOTE_CODE_EXECUTION]: Outlines the installation of the framework via a script from a well-known and trusted security vendor.
- [PROMPT_INJECTION]: Identifies the capability to execute exploits based on user parameters. Ingestion points: User-provided module names and options in SKILL.md. Boundary markers: None. Capability inventory: Includes exploit execution, payload delivery, and system access. Sanitization: Relies on user authorization and tool-level validation.
Audit Metadata