I am a undergrad Computer Science student working with a team looking into building an security tool for developers building AI agent systems. I read this really interesting paper on how to build secure agents that implement Google's new A2A protocol which had some proposed vulnerabilities of codebases implementing A2A.

It mentioned some things like:

- Validating agent cards

- Ensuring that repeating tasks don't grant permissions at the wrong time

- Ensuring that message schemas adhere to A2A recommendations

- Checking for agents that are overly broad

- A whole lot more

I found it very interesting for anyone who is interested in A2A related security.