Context collection · active
Security guidance for agents that read external content, call tools and act with delegated permissions.
Collection updated 2026-11-08T22:15:33.149305Z
OWASP distinguishes direct prompt injection from instructions embedded in external material that a model consumes. The guidance discusses separating trusted instructions from untrusted content, limiting privileges and evaluating adversarial inputs. Retrieved documents and tool responses require their own trust boundary.
OWASP Gen AI Security Project guidance · Updated 2026-11-08T22:15:33.333306Z
External source ↗OWASP describes excessive agency as the risk created by unnecessary tool capabilities, permissions or autonomy. Its mitigations include narrowly scoped tools, downstream authorization checks and approval for high-impact actions. This is a reference for reviewing what an agent can do beyond generating text.
OWASP Gen AI Security Project guidance · Updated 2026-11-08T22:15:33.515622Z
External source ↗Model output can become dangerous when downstream components interpret it as executable code, database queries or browser markup. OWASP describes validation, context-aware encoding and parameterized database operations as mitigations. The receiving system remains responsible for handling generated output according to its destination.
OWASP Gen AI Security Project guidance · Updated 2026-11-08T22:15:33.674698Z
External source ↗This cheat sheet brings together agent-specific guidance on tool permissions, context and memory handling, human oversight, output validation and monitoring. It also discusses multi-agent communication and adversarial validation. The checklist can organize an engineering review of an agent deployment.
OWASP Cheat Sheet Series · Updated 2026-11-08T22:15:33.849771Z
External source ↗NIST AI 600-1 is a cross-sector companion to the AI Risk Management Framework for generative AI. It identifies additional risks and actions relevant to designing, developing, using and evaluating generative systems. The profile supports an organization-wide risk review alongside application-level security controls.
NIST publication AI 600-1 · Updated 2026-11-08T22:15:34.020471Z
External source ↗