metasploit

Plan and execute authorized Metasploit assessments for OpenClaw tasks with repeatable workflows, including target triage, exploit module selection, option tu...

This skill implements a legitimate, cautious Metasploit workflow and includes a small helper script to generate .rc files, but the package metadata does not declare that msfconsole and python3 are required. Before installing or running: (1) Verify you have explicit, written authorization for any targets you test; (2) confirm msfconsole and python3 are present and allowed in your environment; (3) inspect scripts/build_rc.py (it's short and readable) and any output paths the skill will write to (spool, .rc files); (4) run in an isolated/test environment first to avoid accidental impact; and (5) prefer source or homepage provenance — this package has no homepage listed, so if provenance matters to you, request the publisher to provide it. The omission of required binaries in metadata may be an oversight, but treat it as a risk until clarified.

Type: OpenClaw Skill Name: metasploit-skill Version: 1.0.0 The skill bundle provides a structured framework for automating Metasploit exploitation workflows, which constitutes a high-risk capability. It includes a Python script (`scripts/build_rc.py`) to generate Metasploit resource files and comprehensive documentation (`SKILL.md`, `workflow.md`) guiding the agent through target triage, module selection, and execution. While the instructions explicitly mandate authorization and scoping, the inherent risk of providing an AI agent with automated exploitation tools warrants a suspicious classification under the provided criteria.