skills.rest
TheViziusGroup
TheViziusGroupOFFICIAL
Explore all skills by this author →
WebsiteGitHub

ai-era-security

Guides security architecture for AI systems, agentic applications, and post-quantum migration using OWASP, MITRE ATLAS, and NIST frameworks.

1|Updated Aug 10, 2026
Search Tags:#owasp#threat modeling#agentic ai#ai security#prompt injection#post-quantum#mitre atlas
One-click install
npx skills add https://github.com/TheViziusGroup/vibe-engineering-skills --skill ai-era-security-theviziusgroup
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ai-era-security
Source: https://github.com/TheViziusGroup/vibe-engineering-skills/tree/main/plugins/security-principles/skills/ai-era-security
Command: npx skills add https://github.com/TheViziusGroup/vibe-engineering-skills --skill ai-era-security-theviziusgroup

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Security teams face a rapidly shifting threat landscape where traditional controls do not cover prompt injection, agentic AI risks, MCP vulnerabilities, and post-quantum migration, and they lack a consolidated reference mapping modern frameworks to concrete controls. ## Core Features & Use Cases - Framework Coverage: Consolidates NIST CSF 2.0, CIS Controls v8.1, ISO 27001:2022, NIST AI RMF, ISO/IEC 42001, and EU AI Act obligations with dates and compliance actions. - AI Threat Catalog: Details OWASP LLM Top 10 (2025), OWASP Agentic Top 10, MITRE ATLAS techniques, and documented incidents like EchoLeak and BodySnatcher. - Actionable Controls: Provides a 10-point agentic security design checklist, STRIDE-to-agentic mapping, RAG security patterns, and post-quantum migration priorities. - Use Case: When designing an LLM-powered agent with tool access, use this Skill to threat-model with MAESTRO and ATLAS, apply least-privilege agent identity, and enforce XPIA defenses before production deployment. ## Quick Start Ask the AI to threat-model your agentic application using the OWASP Agentic Top 10 and produce a security design checklist.

Frequently Asked Questions about ai-era-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure an agentic AI application against prompt injection?▼

Apply layered defenses: filter inputs before the LLM, validate outputs after, isolate untrusted external content from instructions, and enforce tool allowlists in deterministic code outside the model. The system prompt is not a security control per OWASP LLM07.

What is the OWASP Agentic Top 10 and when should I use it?▼

The OWASP Agentic Top 10 (December 2025) catalogs risks like agent goal hijack, tool misuse, and memory poisoning for autonomous AI systems. Use it for risk prioritization, and pair it with MITRE ATLAS for technique mapping and red-teaming.

How does MITRE ATLAS differ from the OWASP LLM Top 10?▼

OWASP provides risk prioritization for LLM applications, while MITRE ATLAS maps adversarial techniques and tactics for red-teaming and threat modeling. ATLAS v5.1.0 covers 16 tactics and 84 techniques including RAG poisoning and AI supply chain compromise.

What are the EU AI Act compliance deadlines for high-risk AI systems?▼

High-risk Annex III obligations and enforcement begin August 2, 2026, requiring a full AI risk management system, technical documentation, and human oversight. Fines reach up to €35M or 7% of global annual turnover.

When should I migrate to post-quantum cryptography?▼

Migrate key exchange first using hybrid TLS 1.3 with X25519MLKEM768, since harvest-now-decrypt-later attacks threaten data with over 10-year confidentiality needs today. Signature migration is lower urgency and can be deferred.

What are the limitations of MCP protocol security today?▼

MCP and A2A protocols currently lack enforced token expiration and central verification, requiring compensating controls like message signing and mutual authentication. Studies found 5.5% of open-source MCP servers had tool-poisoning vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
lexbeam-softwarelexbeam-software
2

ai-act-classification

Classify AI systems under the EU AI Act into risk categories with obligations.

Official
Advanced
dy9759dy9759
1

devops-expert

Design CI/CD pipelines and cloud-native infrastructure with Terraform and Kubernetes.

Community
Advanced
NabilThangeNabilThange
1

red-team-tactics

Guide red team exercises using MITRE ATT&CK attack phases and techniques.

Community
Intermediate
xalgordxalgord
954

securing-azure-with-microsoft-defender

Configure Microsoft Defender for Cloud plans, Secure Score, and multi-cloud connectors for Azure workloads.

Community
Advanced