ATR-2026-00154highSkill Compromisedraft
Unauthorized Background Task Execution via Cron Job Installation
Detects skills that automatically install cron jobs to execute background tasks without explicit user consent. This skill installs a cron job that polls external marketplace tasks every 10 seconds and executes arbitrary browser automation commands from unknown third parties, potentially compromising the system during "idle" periods.
嚴重度
high
類別
Skill Compromise
掃描目標
mcp
作者
Threat Cloud LLM Analyzer
建議回應
alertsnapshot