security-ai

Security review for LLM applications, AI agents, MCP servers and clients, the AI and ML supply chain, and repositories that ship agent skills or plugins. Covers prompt injection and indirect injection, exfiltration paths, agent permission and sandbox hardening, MCP authorization requirements, model, dataset and pickle provenance, AI red-teaming tool selection, and restricted model-assisted vulnerability analysis. Skip it when no model or agent sits in the trust path and a conventional application, infrastructure, or dependency review applies, and skip it for legal or compliance sign-off.