12.03

Agent security

You treat everything the agent reads as untrusted data rather than a command, and reason about the lethal trifecta, prompt injection, tool misuse, permission escalation and memory poisoning as an agent's own attack surface, distinct from generic responsible-AI.

Who's hiring for this skill

79 companies have live AI-PM roles that ask for skills taught in this lesson.

This subchapter is part of the paid course.

Its video, its written lesson, its exercise and its grading are all included on any plan. The free subchapters stay free either way.

Keep going