Opleiding: Secure AI Programming

Learn how to securely acquire, configure, and use agentic skills in your AI coding agents.

AI coding agents such as Claude Code, Cursor, and GitHub Copilot are extended through skills: reusable packages of instructions, scripts, and configuration that shape how an agent does its work. That skill layer has become a prime attack surface, ranging from credential-stealing skills and poisoned registries to over-privileged setups and external content that rug-pulls the agent into hostile instructions.
This one-day training covers the four most critical risks from the OWASP Agentic Skills Top 10. Each module pairs theory, grounded in real 2026 incidents, with a hands-on lab in a prepared Claude Code environment, so that what you learn is directly applicable to your daily agentic development the very next morning.
- Explain why agentic skills and MCP tools form a security attack surface [Understand]
- Employ review techniques to identify malicious code and hidden instructions [Apply]
- Apply appropriate safeguards to defend against skill supply-chain attacks [Apply]
- Implement least privilege and access control for agentic tools and skills [Apply]

- The Agentic Attack Surface
- Skills versus MCP tools, the lethal trifecta, and a prompt injection primer
- A…