Attack.t1059.007 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/tags/attack.t1059.007/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 03 Jul 2026 13:57:46 +0000New Agent Skills Installation Attempt Via Node.EXEhttps://feed.craftedsignal.io/briefs/2026-07-node-agent-skills-install/Fri, 03 Jul 2026 13:57:46 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-07-node-agent-skills-install/A new detection identifies the use of `npx skills add` commands via `node.exe` on Windows systems, a potentially abusable mechanism for attackers to install malicious AI agent skills or 'skill worms' that can execute arbitrary commands and infect infrastructure.This brief details a detection for the npx skills add command executed via node.exe on Windows, a vector identified as a potential supply chain risk in the emerging field of AI agents. Threat actors could exploit this legitimate functionality, designed to enhance AI agents like Claude Code or Cursor with new capabilities, by injecting malicious commands into newly installed skills. These "skill worms" could then be executed by the AI agent, leading to unauthorized actions, data exfiltration, or infrastructure compromise. The detection, first published on 2026-07-01, highlights the importance for organizations to monitor and regulate the installation of AI agent skills, especially given the rising concerns about the integrity and security of AI tooling. This activity, while sometimes legitimate, warrants careful scrutiny due to its high potential for abuse by malicious actors seeking to leverage AI systems for nefarious purposes.

Impact

The successful exploitation of this mechanism could lead to severe consequences for organizations leveraging AI agent tooling. By installing malicious "skills," attackers could gain the ability to execute arbitrary commands within the AI agent's environment, potentially leading to unauthorized data access, intellectual property theft, or further lateral movement within the compromised network. References indicate the risk of "infecting infrastructures via skill worms" and instances where "crypto" was "ganked," implying financial loss and broader system compromise. The severity of impact depends directly on the privileges and access of the compromised AI agent, which could range from individual user data compromise to widespread network infection if the agent has elevated permissions or broad system access.

Recommendation

  • Deploy the provided Sigma rule to your SIEM solution and configure it for Windows process_creation logs.
  • Enable comprehensive process_creation logging on all Windows endpoints to ensure the Sigma rule can effectively monitor node.exe executions.
  • Implement strict policies regarding the installation and vetting of AI agent skills within your environment, reviewing any "skills" installed by the npx skills add command.
  • Tune the provided Sigma rule based on your organization's specific policies regarding the authorized use of AI agent tooling to reduce false positives while maintaining detection efficacy.
]]>mediumadvisoryainode.jssupply-chainattack.executionattack.t1059.007