Building secure AI agents

This post details security considerations for building AI agents, focusing on prompt injection, data exfiltration, and designing for failure. It emphasizes scoping tools to user authority, treating model output as untrusted, sanitizing markdown, and avoiding secrets in prompts. It also references `harden-react-markdown` and `markdown-to-markdown-sanitizer` for output sanitization.