Skip to content

DEV Community

Hardening AI Agents Series' Articles

Back to Ofri Peretz's Series

Cover image for Every AI Model Ships a Vulnerability in Half the Code It Writes. Prompt Injection Has 3 Faces in Your Vercel AI SDK App — Here's the ESLint Rule for Each.

Dec 19 '25

Every AI Model Ships a Vulnerability in Half the Code It Writes. Prompt Injection Has 3 Faces in Your Vercel AI SDK App — Here's the ESLint Rule for Each.

#ai #security #javascript #devsecops

12 min read

Cover image for I Linted Every OWASP LLM Category Against a Real Vercel AI SDK App. 8 Fire. 2 Are Vendor Theater.

Dec 19 '25

I Linted Every OWASP LLM Category Against a Real Vercel AI SDK App. 8 Fire. 2 Are Vendor Theater.

#ai #security #javascript #devsecops

10 min read

Cover image for I Linted 12 AI-Shaped Agent Tools. All 12 Were Missing an Input Schema.

Dec 20 '25

I Linted 12 AI-Shaped Agent Tools. All 12 Were Missing an Input Schema.

#ai #security #javascript #devsecops

15 min read

Cover image for 65–75% of Claude's Code Shipped a Vuln. Hardcoded Secrets Are the One an Agent Can Actually Fix.

Dec 31 '25

65–75% of Claude's Code Shipped a Vuln. Hardcoded Secrets Are the One an Agent Can Actually Fix.

#ai #security #node #devsecops

12 min read

Cover image for 3 Lines of Vercel AI SDK Code Are a Prompt-Injection Hole — and "Just Sanitize It" Won't Close It

Dec 31 '25

3 Lines of Vercel AI SDK Code Are a Prompt-Injection Hole — and "Just Sanitize It" Won't Close It

#ai #security #javascript #devsecops

19 min read

Cover image for Vercel AI SDK Security Holes That TypeScript Won't Catch — 19 Rules That Will

Dec 31 '25

Vercel AI SDK Security Holes That TypeScript Won't Catch — 19 Rules That Will

#ai #security #devsecops #eslint

12 min read