The Linmas blog
Practical methods for reviewing code, tracing risks, and verifying security fixes.
From the field
3 articles · Newest first
Build an AI agent security test plan around permissions and observable effects. Cover prompt injection, revoked access, retries, and legitimate task success.
Read article: How to Build an AI Agent Security Test Plan
Limit AI agent tools by task, identity, destination, and duration. Use this guide to separate read, draft, and execution permissions and verify the boundaries.
Read article: A Practical Guide to Least Privilege for AI Agent Tools
A practical guide to reviewing AI-generated code: define the scope, trace data and permissions, write useful findings, and verify the fix before merging.
Read article: What Security Review Means for AI-Generated Code