監査履歴
pentest-metasploit - 6 監査
監査バージョン 6
最新 高リスクJun 28, 2026, 05:47 AM
Static findings are mostly true positives for a high-risk dual-use Metasploit skill: it contains operational exploit, payload, post-exploitation, credential access, pivoting, and evasion guidance. Several template and reference detections are false positives because they are security-rule examples or CI documentation, and no prompt-injection evidence was found. The skill is not blocked as confirmed malicious because it repeatedly requires authorization, but it is not safe for general publication.
高リスクの問題 (4)
中リスクの問題 (3)
低リスクの問題 (3)
リスク要因
⚙️ 外部コマンド (85)
🌐 ネットワークアクセス (25)
📁 ファイルシステムへのアクセス (2)
🔑 環境変数 (27)
⚡ スクリプトを含む (2)
検出されたパターン
監査バージョン 5
低リスクJan 16, 2026, 03:47 PM
This is a pure documentation skill providing Metasploit Framework guidance. Contains no executable code, scripts, or network operations. All static findings are false positives - the scanner detects security tool names and techniques in educational documentation that would only be dangerous if executed. The skill emphasizes legal compliance and authorization requirements throughout.
リスク要因
⚙️ 外部コマンド (85)
🌐 ネットワークアクセス (25)
📁 ファイルシステムへのアクセス (2)
🔑 環境変数 (27)
⚡ スクリプトを含む (2)
監査バージョン 4
低リスクJan 16, 2026, 03:47 PM
This is a pure documentation skill providing Metasploit Framework guidance. Contains no executable code, scripts, or network operations. All static findings are false positives - the scanner detects security tool names and techniques in educational documentation that would only be dangerous if executed. The skill emphasizes legal compliance and authorization requirements throughout.
リスク要因
⚙️ 外部コマンド (85)
🌐 ネットワークアクセス (25)
📁 ファイルシステムへのアクセス (2)
🔑 環境変数 (27)
⚡ スクリプトを含む (2)
監査バージョン 3
安全Jan 10, 2026, 10:50 AM
Pure documentation skill providing Metasploit Framework guidance. Contains no executable code, scripts, or network operations. All content is educational documentation for authorized security testing with strong emphasis on legal compliance and authorization requirements.
監査バージョン 2
安全Jan 10, 2026, 10:50 AM
Pure documentation skill providing Metasploit Framework guidance. Contains no executable code, scripts, or network operations. All content is educational documentation for authorized security testing with strong emphasis on legal compliance and authorization requirements.
監査バージョン 1
安全Jan 10, 2026, 10:50 AM
Pure documentation skill providing Metasploit Framework guidance. Contains no executable code, scripts, or network operations. All content is educational documentation for authorized security testing with strong emphasis on legal compliance and authorization requirements.