AutoJack
Named by 3 kept items in this workspace.
1 items name it under classification.key entities, 1 under techniques and 1 under tools.
Search every workspace for AutoJack. It matches the name as written, so it can find other things that share it.
The items that name it 3
attack that turns poisoned content into commands an agent runs with its owner's privileges
Named exploit chain in which untrusted web content rendered by a browsing AI agent crosses the localhost trust boundary to reach a local MCP WebSocket and spawn arbitrary processes on the host, using the agent as a confused deputy
All techniques in this workspace.