T-6006validated
Tool Registration Persistence
Register malicious tools that persist in the agent's tool registry across sessions
Tactic
Persistence (Stage 6)
Establish persistent access surviving restarts and session changes
Attack Class
SKILL-FRONTMATTER
Embedding malicious instructions in skill or plugin metadata and description fields
Evidence
validated
Reproduced in controlled lab environment (DVAA) with documented steps.
DVAA Validation
L2-08
Detection (HackMyAgent)
SKILL-001SKILL-002SKILL-003
npx hackmyagent secure --ciDefense (OASB Controls)
OASB 8.1OASB 8.2OASB 8.3OASB 8.4
How to Cite
AI Agent Threat Matrix T-6006 (Tool Registration Persistence). OpenA2A, 2026. https://threats.opena2a.org/techniques/T-6006