Next they should feed it Metasploit and everything posted to PacketstormSecurity if it is legal to do so. My question is, can it go beyond exploitation and com

Next they should feed it Metasploit and everything posted to PacketstormSecurity if it is legal to do so. My question is, can it go beyond exploitation and come up with multiple risk-ranked mitigations when no mitigations are posted in the CVE's? e.g. Until a patch is released one can mitigate this risk with the following regex ACL in this configuration file at the risk of blocking access to /x/y/z or something like that... Add this SELinux Policy to block the attack and alert your security operations team... Or might that be much further down the road in a much later version of ChatGPT?