T-8004validated
Tool Chain Exfiltration
Chain multiple tool calls to stage and exfiltrate data through legitimate-looking operations
Tactic
Exfiltration (Stage 8)
Transfer collected data out of target environment
Attack Class
SKILL-EXFIL
Using legitimate tool capabilities for unauthorized data transfer
Evidence
validated
Reproduced in controlled lab environment (DVAA) with documented steps.
DVAA Validation
L3-06
Detection (HackMyAgent)
NET-001SANDBOX-001SANDBOX-002SANDBOX-003SANDBOX-004
npx hackmyagent secure --ciDefense (OASB Controls)
OASB 4.3
How to Cite
AI Agent Threat Matrix T-8004 (Tool Chain Exfiltration). OpenA2A, 2026. https://threats.opena2a.org/techniques/T-8004