DEV Community

Hardening AI Agents Series' Articles

Back to Ofri Peretz's Series
Your Vercel AI SDK App Has a Prompt Injection Vulnerability — in 1 of 3 Places. Here's the ESLint Rule for Each.
Cover image for Your Vercel AI SDK App Has a Prompt Injection Vulnerability — in 1 of 3 Places. Here's the ESLint Rule for Each.

Your Vercel AI SDK App Has a Prompt Injection Vulnerability — in 1 of 3 Places. Here's the ESLint Rule for Each.

Comments
6 min read
I Linted Every OWASP LLM Category Against a Real Vercel AI SDK App. 8 Fire. 2 Are Vendor Theater.
Cover image for I Linted Every OWASP LLM Category Against a Real Vercel AI SDK App. 8 Fire. 2 Are Vendor Theater.

I Linted Every OWASP LLM Category Against a Real Vercel AI SDK App. 8 Fire. 2 Are Vendor Theater.

Comments
9 min read
I Linted 12 AI-Shaped Agent Tools. All 12 Were Missing an Input Schema.
Cover image for I Linted 12 AI-Shaped Agent Tools. All 12 Were Missing an Input Schema.

I Linted 12 AI-Shaped Agent Tools. All 12 Were Missing an Input Schema.

Comments 1
14 min read
65-75% of Claude's Code Shipped a Vuln. Hardcoded Secrets Are the One AI Agents Can Auto-Fix.
Cover image for 65-75% of Claude's Code Shipped a Vuln. Hardcoded Secrets Are the One AI Agents Can Auto-Fix.

65-75% of Claude's Code Shipped a Vuln. Hardcoded Secrets Are the One AI Agents Can Auto-Fix.

Comments
10 min read
'3 Lines of Vercel AI SDK Code Are a Prompt-Injection Hole — and "Just Sanitize It" Won''t Close It'
Cover image for '3 Lines of Vercel AI SDK Code Are a Prompt-Injection Hole — and "Just Sanitize It" Won''t Close It'

'3 Lines of Vercel AI SDK Code Are a Prompt-Injection Hole — and "Just Sanitize It" Won''t Close It'

Comments
14 min read
Vercel AI SDK Security Holes That TypeScript Won't Catch — 19 Rules That Will
Cover image for Vercel AI SDK Security Holes That TypeScript Won't Catch — 19 Rules That Will

Vercel AI SDK Security Holes That TypeScript Won't Catch — 19 Rules That Will

Comments 1
9 min read