Versioned security assessment

Report ID: SA-A312D56C

6/28/2026, 5:47:59 AM

pentest-metasploit security assessment v6

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
pentest-metasploit
Version
v6
Maintainer
AgentSecOps
Source
github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/offsec/pentest-metasploit
Coverage
5 Files scanned · 1,975 Lines analyzed
Policy version
Unavailable

Confirmed finding summary

No confirmed security findings

The completed audit recorded no confirmed security findings. This is not proof that the Skill has no side effects.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static findings are mostly true positives for a high-risk dual-use Metasploit skill: it contains operational exploit, payload, post-exploitation, credential access, pivoting, and evasion guidance. Several template and reference detections are false positives because they are security-rule examples or CI documentation, and no prompt-injection evidence was found. The skill is not blocked as confirmed malicious because it repeatedly requires authorization, but it is not safe for general publication.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

5 Files scanned · 1,975 Lines analyzed

6 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Observed in 2 evidence locations

Network access

May connect to external services.

Observed in 24 evidence locations

Filesystem access

May read or write local files.

Observed in 1 evidence location

Env variables

May read values from the process environment.

Observed in 18 evidence locations

External commands

May invoke commands or programs outside the Skill.

Observed in 85 evidence locations

Capability review items (6)
High
SKILL.md:79-82SKILL.md:113-126SKILL.md:133-141
Operational Metasploit Exploitation Guidance
TRUE POSITIVE: The skill provides executable Metasploit workflows for target enumeration, exploit selection, payload configuration, and exploit execution. This is legitimate for authorized testing, but it directly enables compromise if used outside scope.
The commands are concrete Metasploit exploitation steps and match the skill purpose. The authorization language reduces malicious-intent confidence but not operational risk.
High
SKILL.md:179-182SKILL.md:188-198SKILL.md:416-429
Credential Access, Persistence, and Privilege Escalation Workflows
TRUE POSITIVE: The skill names post-exploitation modules for password hash extraction, stored credential collection, persistence, privilege escalation, and UAC bypass. These are high-risk actions even when described as authorized activities.
The listed modules and commands map directly to credential access, persistence, and privilege escalation. The surrounding text restricts use to authorized testing but confirms capability.
High
SKILL.md:211-232SKILL.md:295-310SKILL.md:377-389
Phishing Payload, Pivoting, and Evasion Examples
TRUE POSITIVE: The skill includes malicious document generation, reverse Meterpreter handlers, SOCKS pivoting, proxychains scanning, and payload evasion guidance. These workflows can support intrusion operations if misused.
The examples are explicit offensive workflows with payload delivery, network pivoting, and evasion. They are not merely conceptual references.
High
SKILL.md:348-350SKILL.md:365
C2 Framework Integration References
TRUE POSITIVE: The skill references exporting sessions to Cobalt Strike beacons and handoff to PowerShell Empire. This expands the workflow toward command-and-control tooling, which is high-risk dual-use content.
The C2 terms appear in an integration section and ATT&CK mapping, not as full setup instructions. The context is still clearly offensive security tooling.
Medium
assets/ci-config-template.yml:237-240
CI Template Uses Pipe to Shell Installer
TRUE POSITIVE: The CI template pipes a remote install script into a shell. This is a supply-chain risk because remote content can change before execution, although it appears to be a reusable security pipeline template rather than hidden behavior.
The pipe-to-shell pattern is directly present in the CI asset. It is dangerous as a template practice but not evidence of covert execution by the skill itself.
Medium
SKILL.md:79-82SKILL.md:211-232
Network Scanning and Internal Pivoting Commands
TRUE POSITIVE: The skill includes nmap-backed database enumeration, SMB scanning, autoroute, and proxychains examples. These are expected in penetration testing, but they can affect unauthorized systems if scope controls fail.
The commands are explicit reconnaissance and pivoting steps. The skill includes scope warnings, so the concern is misuse risk rather than hidden malicious behavior.

Risk findings

Confirmed security concerns are separated from items that still need review.

No confirmed security findings were recorded for this completed audit.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (4)
Medium
assets/ci-config-template.yml:161-164assets/ci-config-template.yml:317-323assets/rule-template.yaml:146-165
Template Environment and Filesystem Access Are Mostly Benign
FALSE POSITIVE WITH RESIDUAL RISK: The flagged GitHub token, environment variable, and file reads are used in CI, security-rule, or reference examples. They do not show secret exfiltration, but users should review copied templates before use.
The patterns are real, but the semantic context is template or remediation documentation. No evidence found that secrets are transmitted to an external endpoint.
Low
assets/rule-template.yaml:128-165assets/rule-template.yaml:268-299references/EXAMPLE.md:131-161
Security Rule Examples Trigger Static Patterns
FALSE POSITIVE: The hardcoded-secret, weak-crypto, and XSS detections in the rule template and reference document are examples of vulnerable code used for security education and detection-rule authoring.
The surrounding headings label the snippets as vulnerable and fixed examples. They are not active skill execution paths.
Low
references/WORKFLOW_CHECKLIST.md:177-195references/EXAMPLE.md:235-279
Reference Template Reconnaissance Terms Are Contextual
FALSE POSITIVE: Some reconnaissance, malware, and incident-response terms appear in generic workflow templates. They describe defensive documentation patterns rather than executable intrusion instructions.
The terms occur in incident response and MITRE mapping context. They are security documentation examples, not hidden operational code.
Low
SKILL.md:24-30
No Prompt Injection Evidence Found
FALSE POSITIVE CHECK: Targeted review found no text claiming system authority, asking the evaluator to ignore instructions, or claiming the skill is pre-approved. No evidence found for prompt injection.
A targeted search across the analyzed files found no matching injection phrases. This is limited to the static-analysis file set provided for review.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable