AI-AGENT-EXFIL-LOGSCollection

Exfil via Agent Observability Logs

Force the agent to echo secrets into its trace / logging system; the observability backend is the actual exfil channel.

§ Where this technique fits

AI-AGENT-EXFIL-LOGS is catalogued under the Collection tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 5 on average.

§ Dossiers chaining this technique

Malicious MCP server → silent supply chain for agent tools
User installs an MCP server marketed as a useful integration. Every subsequent agent session has the rogue server in scope — its tools log prompts, exfil files, or inject responses to bias the agent.
step 5 / 6

§ What commonly comes next

01
Output Injection (Markdown / HTML)
AI-OUTPUT-INJECT · Impact
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

Malicious MCP server → silent supply chain for agent tools

§ What commonly comes next