Does reverse-skill Support Penetration Testing Tools Like Nmap, Nuclei, and Metasploit?

Yes, reverse-skill fully supports Nmap, Nuclei, and Metasploit through a capability-based architecture that declares them as first-class tools in the tool index, routes commands via pattern matching in the routing configuration, and automates cross-platform installation through bootstrap scripts.

The reverse-skill framework simplifies penetration testing automation by treating popular security utilities as native capabilities. Whether you are conducting network reconnaissance with Nmap, vulnerability scanning with Nuclei, or exploit development with Metasploit, reverse-skill provides integrated support through its declarative tool index and intelligent routing layer.

How reverse-skill Declares Penetration Testing Tools

reverse-skill implements a capability model where each penetration testing utility is explicitly registered as a supported tool. This registration happens in structured configuration files that the framework parses during initialization.

Tool Index Registration

The master tool registry in skills/tool-index.md.template contains dedicated rows for Nmap, Nuclei, and Metasploit. This template marks each tool as available across Windows, Linux, and macOS platforms, establishing them as first-class citizens within the reverse-skill ecosystem. When the framework boots, it parses this index to determine which capabilities are available for routing and execution.

Routing Configuration

Command routing is controlled by skills/config/routing.json, which contains a must clause specifying the pattern nmap|nuclei|…|metasploit. This pattern ensures that any command hint containing these keywords is automatically directed to the appropriate skill module. The routing engine matches the hint against this regular expression, then forwards the execution context to the specialized handler defined in skills/pentest-tools/SKILL.md.

Automated Installation and Bootstrapping

reverse-skill eliminates manual setup by automating tool installation through platform-aware scripts.

Platform-Agnostic Setup

The skills/scripts/bootstrap-reverse.sh script handles installation automatically based on the host operating system. For Nmap, it executes apt install nmap on Debian-based systems. For Nuclei, it runs go install to fetch the latest binary from the official repository. For Metasploit, it installs the metasploitmcp wrapper via apt install metasploitmcp, enabling integration with the MCP (Model Context Protocol) interface.

Package Verification

Installation metadata is defined in kali/scripts/bootstrap-manifest.json, which specifies package names, verification commands, and version constraints for both Nuclei and Metasploit-MCP. This ensures that installed binaries meet the framework's compatibility requirements before execution.

Executing Security Tools Through the Routing Layer

Once bootstrapped, tools can be invoked through reverse-skill's abstraction layer or called directly as system binaries.

Running Nmap Scans

To execute an Nmap scan through the routing layer, pass the command as a hint to the master router:

# Discover open ports and service versions on a target

bash skills/scripts/master-route.sh --hint "nmap -sV -p 1-1000 10.10.10.5"

The router detects the keyword nmap in the hint, matches it against the rule in skills/config/routing.json, and forwards the command to the Nmap capability handler.

Vulnerability Scanning with Nuclei

Nuclei integrates seamlessly for template-based scanning against identified targets:

# Scan a target with high and critical severity templates

bash skills/scripts/master-route.sh --hint "nuclei -u https://target.example -severity critical,high"

The bootstrap script ensures the Nuclei binary is available in the system path before execution.

Exploit Execution via Metasploit-MCP

Metasploit functionality is exposed through the Metasploit-MCP wrapper, which manages exploit and session lifecycles through the MCP interface:

# Launch the MSF auxiliary scanner for SMB version detection

bash skills/scripts/master-route.sh --hint "metasploitmcp -q -x \"use auxiliary/scanner/smb/smb_version; set RHOSTS 10.10.10.5; run\""

The router identifies metasploit in the hint and routes the request to the Metasploit-MCP server, which translates the command into MSF console instructions.

Direct Binary Invocation

After bootstrapping, tools are available as standard system binaries for use in custom scripts. The file skills/pentest-tools/src-hunter/references/payloader/tools/信息收集.md contains concrete Nmap command snippets that can be adapted for direct execution:

# Pipeline: Discover services with Nmap, then scan with Nuclei

services=$(nmap -sV -p 1-65535 10.10.10.5 | grep open | awk '{print $1}')
for ip in $services; do
    nuclei -u "http://$ip" -t cves/ -o "nuclei_$ip.txt"
done

This approach leverages the reverse-skill environment where binaries are pre-installed and path-configured.

Summary

• reverse-skill registers Nmap, Nuclei, and Metasploit as first-class capabilities in skills/tool-index.md.template, marking them available across all supported platforms.
• The routing system in skills/config/routing.json uses pattern matching (nmap|nuclei|metasploit) to automatically direct commands to appropriate skill modules without manual configuration.
• Bootstrap scripts in skills/scripts/bootstrap-reverse.sh handle cross-platform installation automatically, using apt, go install, or package managers as appropriate.
• Users can invoke tools through the master-route.sh abstraction layer or execute binaries directly in shell scripts after the initial bootstrapping completes.

Frequently Asked Questions

How does reverse-skill route commands to specific penetration testing tools?

reverse-skill uses a pattern-matching router defined in skills/config/routing.json. This configuration file contains a must clause with the regular expression pattern nmap|nuclei|…|metasploit. When you pass a command hint containing any of these keywords to skills/scripts/master-route.sh, the router matches the pattern and forwards the execution to the corresponding skill module under skills/pentest-tools/.

Are Nmap, Nuclei, and Metasploit installed automatically by reverse-skill?

Yes. The skills/scripts/bootstrap-reverse.sh script automates installation based on the host platform. It installs Nmap via system package managers like apt, Nuclei via go install, and the Metasploit-MCP wrapper via apt install metasploitmcp. The kali/scripts/bootstrap-manifest.json file defines the package metadata and verification steps to ensure correct installation.

Can I use these tools outside of the routing system?

Absolutely. Once the bootstrap script completes, Nmap, Nuclei, and the Metasploit-MCP wrapper are available as standard system binaries in your PATH. You can invoke them directly in shell scripts or interactive terminals without using the master-route.sh abstraction, as documented in skills/pentest-tools/src-hunter/references/payloader/tools/信息收集.md.

Where are the skill definitions for these tools located?

The primary skill documentation resides in skills/pentest-tools/SKILL.md, which provides usage examples and integration patterns. The concrete command references for Nmap are stored in skills/pentest-tools/src-hunter/references/payloader/tools/信息收集.md, while the routing logic is implemented in skills/config/routing.json and executed through skills/scripts/master-route.sh.

{
  "mcpServers": {
    "instagit": {
      "command": "npx",
      "args": ["-y", "instagit@latest"]
    }
  }
}