# AI Agent Security

> Secure AI agents against prompt injection, tool abuse, and data exfiltration with defense-in-depth controls.

- Skill: `majiayu000/ai-agent-security` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds add majiayu000/ai-agent-security`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/ai-agent-security/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- License: MIT
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/ai-agent-security

---


# AI Agent Security

Protect agentic systems from adversarial input and unsafe tool execution.

## Threats to Model

- Prompt injection through untrusted content
- Excessive permissions on tools and APIs
- Data exfiltration via model responses
- Cross-tenant context leakage

## Security Controls

1. Isolate tool execution with strict allowlists.
2. Add policy checks before sensitive actions.
3. Limit token scope and credential lifetimes.
4. Apply output filtering for sensitive data.
5. Log every privileged tool invocation.

## Incident Readiness

- Keep immutable audit trails for prompts and tool calls.
- Build kill switches for high-risk tools.
- Run regular red-team scenarios.

## Related Skills

- [llm-app-security](../llm-app-security/) - Application-layer LLM defenses
- [threat-modeling](../../operations/threat-modeling/) - Structured risk analysis