# Secure Ai Agents

> >

- **Type:** Skill
- **Install:** `agentstack add skill-hiteshbandhu-skills-i-use-secure-ai-agents`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [hiteshbandhu](https://agentstack.voostack.com/s/hiteshbandhu)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [hiteshbandhu](https://github.com/hiteshbandhu)
- **Source:** https://github.com/hiteshbandhu/skills-i-use/tree/main/skills/ai-engineer-talks/secure-ai-agents

## Install

```sh
agentstack add skill-hiteshbandhu-skills-i-use-secure-ai-agents
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Secure AI agents

Action playbook from eleven Security @ AI Engineer talks. **Do not summarize talks** — pick a workflow and execute it.

**Supporting files:**
- [workflows.md](workflows.md) — workflows A–G (steps, deliverables, stop conditions)
- [source-index.md](source-index.md) — src-001…src-011 → learnings

Optional deliverables: `{SKILL_OUTPUT_DIR}/secure-ai-agents/` — see [skills-i-use OUTPUT.md](https://github.com/hiteshbandhu/skills-i-use/blob/main/skills/OUTPUT.md).

---

## Step 0 — Pick workflow

```
What is the user trying to secure?
├─ MCP / OAuth / user-delegated agent access     → A
├─ Multi-tool agent before launch (IDOR, SSRF)   → B
├─ Enterprise B2B agent identity & delegation    → C
├─ Agent that runs shell/code (Codex-style)      → D
├─ Pre-prod brittleness / harm / injection       → E
├─ Public site cost & crawler abuse              → F
└─ Remote inference with privacy guarantees      → G
```

Open [workflows.md](workflows.md) for the chosen letter.

---

## Install

```bash
cp -r skills/secure-ai-agents ~/.cursor/skills/
cp -r skills/secure-ai-agents ~/.codex/skills/
cp -r skills/secure-ai-agents ~/.claude/skills/
```

From [skills-i-use](https://github.com/hiteshbandhu/skills-i-use) or ingest-into-skills after sync.

Source corpus: `playlists/security-ai-engineer/` in [ingest-into-skills](https://github.com/hiteshbandhu/ingest-into-skills).

---

## Output to user

1. Name the workflow (A–G) and deliverables you are producing
2. Save checklists/threat models under `./skill-outputs/secure-ai-agents/` when the user wants files
3. Do not auto-commit

---

## Invocation examples

```
@secure-ai-agents OAuth for our MCP server and token exchange
@secure-ai-agents red-team our agent tools before launch
@secure-ai-agents sandbox and network policy for coding agent
```

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [hiteshbandhu](https://github.com/hiteshbandhu)
- **Source:** [hiteshbandhu/skills-i-use](https://github.com/hiteshbandhu/skills-i-use)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-hiteshbandhu-skills-i-use-secure-ai-agents
- Seller: https://agentstack.voostack.com/s/hiteshbandhu
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.