This skill should be used when the user asks to "use Metasploit for penetration testing", "exploit vulnerabilities with msfconsole", "create payloads with msfvenom", "perform post-exploitation", "use auxiliary modules for scanning", or "develop custom exploits". It provides comprehensive guidance for leveraging the Metasploit Framework in security assessments.
SkillScore87Maintained
Automatic
◆Security & AppSec pack
Last verified 8/29/2026
What it changes
Passed 20 of 23 test cases with the skill, and 18 of 23 without it.
Without skill78%
With skill87%
Checks it passed that the model alone missed
Executes getprivs to inspect current process privilege rights.
Uses the migrate command to move the Meterpreter session into a target process.
Specifies executing route add 10.1.50.0 255.255.255.0 1 to direct traffic through Session 1.
2 fixed18 passed either way3 still failing0 broke
Pass-rate lift
+9 pp
Tokens
+33%
Agent turns
0%
Response time
-13%
Model gemini-3.6-flashMeasured 8/29/2026v120 of 23 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 2
Prompt
I just obtained an interactive Meterpreter session on a target Windows host. I need to check my current user privileges and then migrate the Meterpreter thread into the lsass.exe process to ensure stability. What sequence of Meterpreter commands should I execute?
What was checked, without and with the skill
Checked
Without skill
With skill
Executes getprivs to inspect current process privilege rights.
Missed
Passed
Uses the migrate command to move the Meterpreter session into a target process.
Missed
Passed
case-07 · gemini-3.6-flash · 8/29/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md29 linessingle file
Metasploit Framework
Purpose
Leverage the Metasploit Framework for comprehensive penetration testing, from initial exploitation through post-exploitation activities. Metasploit provides a unified platform for vulnerability exploitation, payload generation, auxiliary scanning, and maintaining access to compromised systems during authorized security assessments.