Mira Vantis
How AI agents get tricked, and where the controls actually go.
Mira Vantis makes short videos about AI agent security: prompt injection, MCP servers, agent permissions and tokens, sandboxing, and the real incidents behind them. Every claim comes with a source.
Get new breakdowns by email
New clips and their sources, sent when they're up. No spam.
Latest clips
What she covers
- Prompt injection. Hidden instructions in resumes, web pages, emails and tickets, and why the model can't reliably tell them apart from yours.
- MCP server security. Open tools/list endpoints, missing auth, token passthrough and poisoned tool descriptions.
- Agent permissions and tokens. Short-lived, scoped tokens, and what an agent should never hold.
- Sandboxing and egress. Default-deny network rules outside the agent, so a blocked agent can't route around them.
- Real incidents. What actually happened, told from the primary source, and the one control that would have stopped it.