AUTHOR
Liran Tal
Liran Tal is an AI Security researcher and Head of Developer Relations at Snyk. His recent work focuses on agentic security: he worked on the ToxicSkills research exposing malware and prompt injection across thousands of AI agent skills, publishes hands-on practices for securing MCP servers, and reports CVEs across vulnerable AI frameworks. Liran designs guardrails that make AI-native development safer in practice, covering tool poisoning, command-execution pitfalls, and secure defaults for agentic tools. A longstanding Node.js developer and secure-coding expert, he has authored books on Node.js security and is recognized as a GitHub Star and OpenJS Foundation JavaScriptLandia "Pathfinder for Security."
Articles
Article
Agent Skills Are Supply Chain Components
At AI Native DevCon London, I started with a simple question: who had added a skill to an agent in the last few months? Hands went up. Then I asked people to keep their hands up only if they had ac...
Article
These Aren't the Tools You're Looking For: The Hidden Dangers of MCP
Discover the hidden security risks of Model Context Protocol (MCP) servers, as explosive adoption uncovers vulnerabilities that could turn AI tools into insider threats for developers.