To manage security risks, treat AI agents like new employees. Provide them with their own isolated environment—separate accounts, scoped API keys, and dedicated hardware. This prevents accidental or malicious access to your personal or sensitive company data.

Instead of relying on engineers to remember documented procedures (e.g., pre-commit checklists), encode these processes into custom AI skills. This turns static best-practice documents into automated, executable tools that enforce standards and reduce toil.

The ecosystem of downloadable "skills" for AI agents is a major security risk. A recent Cisco study found that many skills contain vulnerabilities or are pure malware, designed to trick users into giving the agent access to sensitive data and systems.

Unlike human attackers, AI can ingest a company's entire API surface to find and exploit combinations of access patterns that individual, siloed development teams would never notice. This makes it a powerful tool for discovering hidden security holes that arise from a lack of cross-team coordination.

To address security concerns, powerful AI agents should be provisioned like new human employees. This means running them in a sandboxed environment on a separate machine, with their own dedicated accounts, API keys, and access tokens, rather than on a personal computer.

To safely empower non-technical users with self-service analytics, use AI 'Skills'. These are pre-defined, reusable instructions that act as guardrails. A skill can automatically enforce query limits, set timeouts, and manage token usage, preventing users from accidentally running costly or database-crashing queries.

Go beyond single-use skills by chaining them together. For instance, a daily 'morning brief' skill can be designed to automatically trigger a 'podcast guest research' skill whenever a podcast is detected on your calendar. This creates complex, multi-layered automations that run without manual intervention.

Treat AI 'skills' as Standard Operating Procedures (SOPs) for your agent. By packaging a multi-step process, like creating a custom proposal, into a '.skill' file, you can simply invoke its name in the future. This lets the agent execute the entire workflow without needing repeated instructions.

The company's strategy for managing threats from malicious AI agents is to use AI for defense. They are building the capacity to scan everything happening on the platform in real-time, believing that monitoring AI can be just as powerful as generative AI.