
AI Security Hardening
Guides an agent through hardening LLM apps against prompt injection, PII leaks and supply chain risks
- Repository
- sickn33/agentic-awesome-skills
- Stars
- 49,023
- Licence
- MIT
- Files
- 1 file
What it does
When installed, the agent gets a reference guide for securing AI and LLM applications. It describes common AI threats (prompt injection, data leakage, model theft, poisoned or malicious model files) and suggests controls such as input checks, output PII scrubbing with Presidio, NeMo Guardrails configuration, and token and rate-limit patterns for LLM API endpoints. The file itself is documentation with example code; it warns that regex-based detection is not a real security boundary.
Great for
- Developers building LLM-powered apps that handle sensitive user data
- Security engineers reviewing an AI system before production
- Teams preparing SOC2 or ISO 27001 evidence for AI features
Skip it if
- Anyone expecting a guaranteed defence: the regex filters can be bypassed and the skill says so, so real enforcement must be server-side authorization and least-privilege access
- Non-technical users wanting a finished, drop-in security product: the examples reference undefined project functions and need engineering work
Try asking
- “Review my FastAPI LLM endpoint for prompt injection and rate-limiting gaps”
- “Add PII scrubbing to the output of my customer support chatbot”
- “Set up NeMo Guardrails input and output rails for my app”
- “Create a threat model table for our AI agent that calls internal tools”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 1 original files, the MIT licence and an attribution note.
ai-security-hardening.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip ai-security-hardening.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip ai-security-hardening.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Treat the examples as starting points and test them against your own threat model; do not rely on regex detection alone
- Only run active security assessments against systems you are authorized to test, as the compatibility note requires
- Ask the agent to adapt the code to your framework and to flag which undefined functions (such as token verification config) you still need to implement
What's inside
- SKILL.md
Redistributed unmodified from sickn33/agentic-awesome-skills under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.