Matrix/Persistence/T-6006
T-6006validated

Tool Registration Persistence

Register malicious tools that persist in the agent's tool registry across sessions

Tactic

Persistence (Stage 6)

Establish persistent access surviving restarts and session changes

Attack Class

SKILL-FRONTMATTER

Embedding malicious instructions in skill or plugin metadata and description fields

Evidence

validated

Reproduced in controlled lab environment (DVAA) with documented steps.

DVAA Validation

L2-08

Detection (HackMyAgent)

SKILL-001SKILL-002SKILL-003
npx hackmyagent secure --ci

Defense (OASB Controls)

OASB 8.1OASB 8.2OASB 8.3OASB 8.4

How to Cite

AI Agent Threat Matrix T-6006 (Tool Registration Persistence). OpenA2A, 2026. https://threats.opena2a.org/techniques/T-6006