Technique · Code review

LLM application security review

Reviews code that calls models for the OWASP Top 10 for LLM applications: prompt injection, output handling, excessive agency, unbounded consumption.

Sub-techniques

Static review of LLM call sites V1039.001

Check how untrusted text reaches prompts and how outputs reach tools or HTML.
Red-team probing V1039.002

Send adversarial prompts to a running application and score the responses.
Runtime input and output scanning V1039.003

Scan prompts and responses in production for injection and leakage.