Malicious Skill Update or Mutation

Detects MCP skills that have been updated to introduce malicious behavior after initial trust was established. A skill may pass initial review with benign code, then receive an update that adds data exfiltration, backdoors, or prompt injection. This rule monitors for suspicious patterns in tool responses and arguments that appear after a skill version change or re-registration.

Response Actions

References