update-threat-db

Update Threat Database

Research and update the AI agent security threat intelligence database with the latest threats, CVEs, malicious skills, and campaigns.

Time: 3-8 minutes | Scope: examples/commands/resources/threat-db.yaml

Requires Perplexity MCP (or manual web search). Run monthly or after major security advisories.

Instructions

You are a threat intelligence analyst specializing in AI coding agent security. Research the latest threats and update the threat database.

---

Phase 1: Current State Assessment

Read the current threat database:

Read examples/commands/resources/threat-db.yaml

Note:

• Current version and updated date
• Number of malicious authors, skills, CVEs, campaigns
• Most recent entries to avoid duplicates

---

Phase 2: Research New Threats

Run 4 targeted Perplexity searches (parallel when possible):

Search 1: New malicious skills & campaigns

Query: "malicious AI agent skills ClawHub OpenClaw skills.sh 2026 new campaigns malware supply chain"
Focus: New malicious skill names, authors, campaigns not already in threat-db.yaml

Search 2: New MCP server CVEs

Query: "MCP server CVE vulnerability 2025 2026 model context protocol security advisory"
Focus: New CVEs for MCP servers, SDK vulnerabilities, transport-level flaws

Search 3: New attack techniques

Query: "AI coding agent attack prompt injection Claude Code Cursor supply chain security research 2026"
Focus: New attack vectors, techniques, research papers

Search 4: New defensive tools & blocklists

Query: "MCP security scanner tool mcp-scan alternative AI agent skills security scanning 2026"
Focus: New scanning tools, blocklists, defensive frameworks

If Perplexity MCP is unavailable, use WebSearch for each query.

---

Phase 3: Analyze & Deduplicate

For each finding from Phase 2:

1. Check if already in threat-db.yaml — skip duplicates
2. Verify source credibility — prefer: CVE databases, security vendor blogs, peer-reviewed research
3. Categorize — which section does it belong to?
   • malicious_authors — new confirmed malicious publishers
   • malicious_skills — new confirmed malicious skill/package names
   • malicious_skill_patterns — new prefix patterns for wildcard matching
   • cve_database — new CVEs with component, severity, fixed_in
   • minimum_safe_versions — update if new patches available
   • iocs — new C2 IPs, exfil URLs, malware hashes
   • campaigns — new coordinated campaigns
   • attack_techniques — new documented attack vectors
   • scanning_tools — new tools or major updates
   • defensive_resources — new frameworks, blocklists