Brooks McMillin

AI Security Researcher & Infrastructure Security Engineer

I lead infrastructure security at Dropbox, focusing on AI agent security, LLM development tooling, and securing production AI systems. My team builds frameworks that help engineers safely ship AI-powered features while defending against emerging threats to autonomous systems and ML infrastructure.

A Beginner's Guide to Safe LLM-Assisted Development

A complete beginner's guide to setting up every safety layer from the 'Coding Safer with LLMs' post: pre-commit hooks, local review agents, CI workflows, and CLAUDE.md—starting from scratch.

Read Article

Current Focus

AI Agent & Infrastructure Security

Building security frameworks for AI agents, developing LLM security tooling for engineering teams, and securing the infrastructure that powers production AI systems at scale.

  • Designing security architectures for autonomous AI agents — sandboxing, permissions, and runtime controls
  • Building LLM security tooling that integrates into developer workflows for safe AI feature development
  • Threat modeling for MCP, multi-agent systems, and tool-use patterns in production environments
  • Securing infrastructure for AI/ML platforms — identity, access control, and data protection

Featured Projects

Agent Framework

production
Python Model Context Protocol OAuth 2.0 Anthropic Claude

A production-ready framework for building LLM agents with the Model Context Protocol (MCP). This framework provides the foundation for building …

  • Production-ready framework for building LLM agents with MCP
  • Full OAuth 2.0 with PKCE and dynamic client registration
Astro Node.js PostgreSQL OAuth 2.0

A comprehensive secure task management platform consisting of three integrated components: a main application, Python SDK, and MCP server integration. …

  • Full OAuth 2.0 authorization server with PKCE support
  • Comprehensive security testing suite with Vitest
Go Python GSM Serial Communication

A dual-language secure communications suite providing SMS capabilities through GSM modems, built with both Go and Python implementations. This project …

  • Cross-platform GSM modem interface (Go + Python)
  • Real-time SMS communication with security considerations
Python Go rmapi Anthropic Claude

A comprehensive toolkit for secure research paper management on reMarkable tablets, featuring AI-powered classification and automated organization. …

  • Automated research paper classification using AI
  • Secure PDF processing pipeline with content validation
View All Projects

Recent Appearances

[un]prompted March 2026 San Francisco, CA

Real patterns and failures from building specialized agents with shared infrastructure, covering capability bounding, prompt injection detection, memory isolation, and OAuth device flow

The Secure Disclosure Podcast March 2026 Mesa, AZ

Discussion on malicious MCP servers, recurring security mistakes in AI tooling, prompt injection persistence, and practical strategies for safe AI deployment

CactusCon February 2026 Mesa, AZ

Security audit of MCP servers and their OAuth implementations, demonstrating that 90% of vulnerabilities reflect longstanding security principles amplified by AI agents

Dropbox (Internal Tech Talk) February 2026

A three-layer defensive framework for catching security mistakes introduced by LLM-assisted code generation before they reach production

View All Appearances

Let's Connect

Interested in AI security research, collaboration opportunities, or speaking engagements? I'd love to hear from you.

More About Me