DEV Community

Ofri Peretz
Ofri Peretz

Posted on

Getting Started with eslint-plugin-vercel-ai-security

#ai #security #vercel #tutorial

19 AI security rules. Prompt injection. Agent safety. OWASP LLM coverage.

Quick Install 

npm install --save-dev eslint-plugin-vercel-ai-security
Enter fullscreen mode Exit fullscreen mode

Flat Config 

// eslint.config.js
import vercelAI from 'eslint-plugin-vercel-ai-security';

export default [vercelAI.configs.recommended];
Enter fullscreen mode Exit fullscreen mode

Run ESLint 

npx eslint .
Enter fullscreen mode Exit fullscreen mode

You'll see output like:

src/chat.ts
  8:3  error  🔒 CWE-77 OWASP:LLM01 | Unvalidated prompt input
              Risk: Prompt injection vulnerability
              Fix: Use validated prompt: sanitizePrompt(userInput)

src/agent.ts
  24:5 error  🔒 OWASP:LLM08 | Tool missing confirmation gate
              Risk: AI agent can execute arbitrary actions
              Fix: Add await requireUserConfirmation() before execution
Enter fullscreen mode Exit fullscreen mode

Rule Overview

Category Rules Examples
Prompt Injection 4 Unvalidated input, dynamic system prompts
Data Exfiltration 3 System prompt leaks, sensitive data in prompts
Agent Safety 3 Missing tool confirmation, unlimited steps
Resource Limits 4 Token limits, timeouts, abort signals
RAG Security 2 Content validation, embedding verification
Output Safety 3 Output filtering, validation

Quick Wins

Before 

// ❌ Prompt Injection Risk
const { text } = await generateText({
  model: openai('gpt-4'),
  prompt: userInput, // Unvalidated!
});
Enter fullscreen mode Exit fullscreen mode

After 

// ✅ Validated Input
const { text } = await generateText({
  model: openai('gpt-4'),
  prompt: sanitizePrompt(userInput),
  maxTokens: 1000,
  abortSignal: AbortSignal.timeout(30000),
});
Enter fullscreen mode Exit fullscreen mode

Before 

// ❌ Unlimited Agent
const { result } = await generateText({
  model: openai('gpt-4'),
  tools: dangerousTools,
});
Enter fullscreen mode Exit fullscreen mode

After 

// ✅ Limited Agent
const { result } = await generateText({
  model: openai('gpt-4'),
  tools: safeTools,
  maxSteps: 5,
});
Enter fullscreen mode Exit fullscreen mode

Available Presets 

// Security-focused configuration
vercelAI.configs.recommended;

// Full OWASP LLM Top 10 coverage
vercelAI.configs['owasp-llm-top-10'];
Enter fullscreen mode Exit fullscreen mode

OWASP LLM Top 10 Mapping

OWASP LLM Rules
LLM01: Prompt Injection require-validated-prompt, no-dynamic-system-prompt
LLM02: Insecure Output require-output-filtering, no-unsafe-output-handling
LLM04: Model DoS require-max-tokens, require-abort-signal
LLM06: Sensitive Data no-sensitive-in-prompt, no-system-prompt-leak
LLM07: Plugin Design require-tool-schema, require-tool-confirmation
LLM08: Excessive Agency require-max-steps, require-tool-confirmation

Customizing Rules 

// eslint.config.js
import vercelAI from 'eslint-plugin-vercel-ai-security';

export default [
  vercelAI.configs.recommended,
  {
    rules: {
      // Configure max steps
      'vercel-ai/require-max-steps': ['error', { maxSteps: 10 }],

      // Make RAG validation a warning
      'vercel-ai/require-rag-content-validation': 'warn',
    },
  },
];
Enter fullscreen mode Exit fullscreen mode

Quick Reference 

# Install
npm install --save-dev eslint-plugin-vercel-ai-security

# Config (eslint.config.js)
import vercelAI from 'eslint-plugin-vercel-ai-security';
export default [vercelAI.configs.recommended];

# Run
npx eslint .
Enter fullscreen mode Exit fullscreen mode

Quick Install

📦 npm: eslint-plugin-vercel-ai-security
📖 Full Rule List
📖 OWASP LLM Mapping

⭐ Star on GitHub

🚀 Building with Vercel AI SDK? Let me know your experience in the comments!

GitHub | LinkedIn | Dev.to

Top comments (0)