DevOps-Security-Agent-Skills/security/ai/ai-agent-security/SKILL.md

name, description, license, metadata

name	description	license	metadata
ai-agent-security	Secure AI agents against prompt injection, tool abuse, and data exfiltration with defense-in-depth controls.	MIT	author version devops-skills 1.0

AI Agent Security

Protect agentic systems from adversarial input and unsafe tool execution.

Threats to Model

• Prompt injection through untrusted content
• Excessive permissions on tools and APIs
• Data exfiltration via model responses
• Cross-tenant context leakage

Security Controls

1. Isolate tool execution with strict allowlists.
2. Add policy checks before sensitive actions.
3. Limit token scope and credential lifetimes.
4. Apply output filtering for sensitive data.
5. Log every privileged tool invocation.

Incident Readiness

• Keep immutable audit trails for prompts and tool calls.
• Build kill switches for high-risk tools.
• Run regular red-team scenarios.

Related Skills

• llm-app-security - Application-layer LLM defenses
• threat-modeling - Structured risk analysis