Security Test: LLM Endpoint Detection¶

Description¶

Default Severity: low

LLM Endpoint Detection is about finding when an application exposes a way to interact with a language model, which can be a hidden door for potential attackers. If developers aren’t careful, these endpoints may allow malicious input that tricks the system into doing unexpected or harmful things, like revealing sensitive data or running unauthorized code. Often, the issue arises when endpoints aren’t properly secured or validated, letting attackers use injection attacks to manipulate how the underlying model behaves. This can lead not only to data breaches but also to broader misuse of the application, especially when developers make assumptions about what kind of input will be received. The danger lies in these overlooked spaces—what seems like a harmless feature can become a gateway for more significant security problems if not treated with caution.

Reference:

• https://owasp.org/www-project-top-10-for-large-language-model-applications/

Configuration¶

Identifier: injection/llm_detection

Examples¶

All configuration available:

checks:
  injection/llm_detection:
    skip: false # default

Compliance and Standards¶