Promptware / malicious agent skill detonation (Zenity-class: SKILL.md / MCP server supply chain)
Detects the execution of processes related to 'SKILL.md', 'npx', 'mcp-server', or 'invoke_skill' followed closely by read or copy actions on sensitive file locations (SSH keys, AWS credentials, environment files, or AppData). The rule further correlates this activity with subsequent outbound network connections from the same device.
Microsoft Sentinel (KQL)
