AI agent security14 min read
AI agent security checklist for developers
A practical, reviewable checklist for the controls that matter before an AI agent can touch real code, systems, or customer data.
Read the checklistLoading VibeLint...
VibeLint Blog
Security notes for AI-assisted development.
Practical guides on prompt injection, MCP risk, agent permissions, approvals, and action logs.
Cursor
OpenAI Codex
Claude
Windsurf
Google Antigravity
n8n
LangChain
Model Context Protocol
GPT
Anthropic
Gemini
GitHub CopilotFeatured guide
Latest guides
Prompt injection10 min read
How to detect prompt injection in AI-generated code
Trace untrusted instructions from their source to the model and from model output to every execution-capable sink.
MCP security11 min read
MCP security risks for Claude Code users
An MCP server extends what Claude Code can reach. Review identity, scopes, commands, network access, and approval behavior before connecting it.
Vibe coding14 min read
Vibe Coding Security: The Complete Guide to Securing AI-Generated Code
A practical guide to the code, permission, tool-use, and MCP checks that keep fast AI-assisted development reviewable.
AI code security10 min read
Pre-Write Scanning vs SAST: Why Static Analysis Misses What AI Agents Actually Do
SAST analyzes static artifacts. Pre-write checks add a decision point before an AI agent writes risky code or executes a sensitive action.
AI agent security12 min read
AI Agent Permission Policies That Actually Work
Replace “the agent has tools” with explicit allow, block, and approval rules that check identity, action, target, environment, and impact before execution.
AI code security11 min read
Secret Leaks in AI-Generated Code: How Agents Expose API Keys
AI coding agents can hardcode keys, read .env files, paste tokens into chat, and commit credentials. Catch secret leaks before code lands and before agents open secret files.